Lucene search
+L

5101 matches found

Debian CVE
Debian CVE
added 2026/02/14 3:36 p.m.9 views

CVE-2026-23141

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in rangeisholeinparent Before accessing the diskbytenr field of a file extent item we need to check if we are dealing with an inline extent. This is because for inline extents their data star...

5.5CVSS5.2AI score0.00123EPSS
SaveExploits0
EUVD
EUVD
added 2026/02/14 3:36 p.m.14 views

EUVD-2026-5895

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in rangeisholeinparent Before accessing the diskbytenr field of a file extent item we need to check if we are dealing with an inline extent. This is because for inline extents their data star...

5.2AI score0.00123EPSS
SaveExploits0References4
CVE
CVE
added 2026/02/14 3:36 p.m.43 views

CVE-2026-23141

CVE-2026-23141 affects the Linux kernel (btrfs subsystem) where btrfs: send: check for inline extents in range_is_hole_in_parent() failed to verify inline extents before accessing the disk_bytenr field. The bug could allow an invalid memory access when inline data is accessed, or when the inline ...

5.5CVSS5.2AI score0.00123EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/02/14 3:36 p.m.8 views

CVE-2026-23141 btrfs: send: check for inline extents in range_is_hole_in_parent()

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in rangeisholeinparent Before accessing the diskbytenr field of a file extent item we need to check if we are dealing with an inline extent. This is because for inline extents their data star...

5.2AI score
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/02/14 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-23157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/14 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-23141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: send: check for inline extents in rangeisholeinparent Before accessing the diskbytenr field of a file extent item we need to check if we are dealing with...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/14 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-23181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: sync read disk super and set block size When the user performs a btrfs mount, the block device is not set correctly. The user sets the block size of the...

6AI score0.00156EPSS
SaveExploits0References3
Ubuntu
Ubuntu
added 2026/02/13 9:44 a.m.28 views

USN-8033-4: Linux kernel (AWS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux UML; - x86 architecture; - Block layer subsystem;...

9.8CVSS7.3AI score0.006EPSS
SaveExploits5
RedhatCVE
RedhatCVE
added 2026/02/13 7:21 a.m.24 views

CVE-2026-25828

grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolvedevice. NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific...

5.4CVSS5.9AI score0.01215EPSS
SaveExploits1References1
NVD
NVD
added 2026/02/12 10:16 p.m.15 views

CVE-2026-25828

grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolvedevice. NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific...

5.4CVSS0.01215EPSS
SaveExploits1References3
OSV
OSV
added 2026/02/12 11:12 a.m.21 views

USN-8033-3 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux UML; - x86 architecture; - Block layer subsystem;...

9.8CVSS7AI score0.006EPSS
SaveExploits5References115
OSV
OSV
added 2026/02/12 10:55 a.m.22 views

USN-8033-2 linux-intel-iot-realtime, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux UML; - x86 architecture; - Block layer subsystem;...

9.8CVSS6.9AI score0.006EPSS
SaveExploits5References115
Ubuntu
Ubuntu
added 2026/02/12 10:55 a.m.23 views

USN-8033-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux UML; - x86 architecture; - Block layer subsystem;...

9.8CVSS5.9AI score0.006EPSS
SaveExploits5
ATTACKERKB
ATTACKERKB
added 2026/02/12 12:00 a.m.6 views

CVE-2026-25828

grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolvedevice. NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific...

5.4CVSS5.9AI score0.01215EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/02/12 12:00 a.m.6 views

CVE-2026-25828

grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolvedevice. NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific...

5.9AI score0.01215EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/02/12 12:00 a.m.16 views

grub-btrfs 操作系统命令注入漏洞

Grub-Btrfs is a Linux tool developed by Antynea’s individual developers. Versions of Grub-Btrfs starting from 2026-01-31 and earlier contained an operating system command injection vulnerability. This vulnerability stemmed from the lack of cleanup of the $root parameter, which could lead to OS...

5.4CVSS5.8AI score0.01215EPSS
SaveExploits1References5
CVE
CVE
added 2026/02/12 12:00 a.m.25 views

CVE-2026-25828

CVE-2026-25828 affects grub-btrfs up to 2026-01-31 on Arch Linux and derivatives. The initramfs hook grub-btrfs-overlayfs passes the kernel parameter $root to resolve_device() without sanitization, enabling potential initramfs command execution as root during boot. The issue is rooted in not sani...

5.4CVSS5.9AI score0.01215EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/02/12 12:00 a.m.23 views

PT-2026-7909

grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolve device...

5.6AI score0.01215EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/02/12 12:00 a.m.35 views

CVE-2026-25828

grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolvedevice. NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific...

0.01215EPSS
SaveExploits1References3
Fedora
Fedora
added 2026/02/11 12:59 a.m.6 views

[SECURITY] Fedora 42 Update: rust-btrd-0.5.3-12.fc42

The btrfs debugger...

7.5CVSS5.4AI score0.00443EPSS
SaveExploits1
Rows per page
Query Builder