Lucene search
+L

130 matches found

Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.22 views

PT-2025-37630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the jbd2 fc wait bufs function that may lead to a use-after-free condition. This occurs because the function uses a buffer head bh after its...

7.8CVSS7.4AI score0.21521EPSS
SaveExploits4References860
Tenable Nessus
Tenable Nessus
added 2025/09/06 12:00 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2025-39691

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/buffer: fix use-after-free when call bhread helper There's issue as follows: BUG: KASAN: stack-out- of-bounds in endbufferreadsync+0xe3/0x110 Read of size 8...

7.8CVSS6.8AI score0.00174EPSS
SaveExploits0References3
OSV
OSV
added 2025/09/05 5:20 p.m.11 views

CVE-2025-39691 fs/buffer: fix use-after-free when call bh_read() helper

In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bhread helper There's issue as follows: BUG: KASAN: stack-out-of-bounds in endbufferreadsync+0xe3/0x110 Read of size 8 at addr ffffc9000168f7f8 by task swapper/3/0 CPU: 3 UID: 0 PID: 0 Comm...

7.8CVSS6.1AI score
SaveExploits0References15
Cvelist
Cvelist
added 2025/09/05 5:20 p.m.30 views

CVE-2025-39691 fs/buffer: fix use-after-free when call bh_read() helper

In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bhread helper There's issue as follows: BUG: KASAN: stack-out-of-bounds in endbufferreadsync+0xe3/0x110 Read of size 8 at addr ffffc9000168f7f8 by task swapper/3/0 CPU: 3 UID: 0 PID: 0 Comm...

7.8CVSS0.00174EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-40951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2aborttrigger bdev-bdsuper has been removed and...

5.5CVSS5.4AI score0.00239EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/07/14 8:20 a.m.7 views

kernel: exfat: fix random stack corruption after get_block

In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after getblock When getblock is called with a bufferhead allocated on the stack, such as dompagereadpage, stack corruption due to bufferhead UAF may occur in the following race condition...

7.8CVSS6.8AI score0.00192EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.2 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: exfat: Fixed random stack corruption that occurs after getblock. When getblock is called with a bufferhead allocated on the stack, such as in dompagereadpage, stack corruption due to UAF of the bufferhead may occur in the followi...

7.8CVSS6.3AI score0.00192EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/16 3:15 p.m.3 views

DEBIAN-CVE-2025-22036

In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after getblock When getblock is called with a bufferhead allocated on the stack, such as dompagereadpage, stack corruption due to bufferhead UAF may occur in the following race condition...

7CVSS5.8AI score0.00192EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/16 2:11 p.m.1 views

CVE-2025-22036 exfat: fix random stack corruption after get_block

In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after getblock When getblock is called with a bufferhead allocated on the stack, such as dompagereadpage, stack corruption due to bufferhead UAF may occur in the following race condition...

7.5AI score0.00192EPSS
SaveExploits0References4
OSV
OSV
added 2025/02/27 2:07 a.m.12 views

CVE-2025-21722 nilfs2: do not force clear folio if buffer is referenced

In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is referenced Patch series "nilfs2: protect busy buffer heads from being force-cleared". This series fixes the buffer head state inconsistency issues reported by syzbot that occurs when...

7.8CVSS6.6AI score
SaveExploits0References12
Debian CVE
Debian CVE
added 2025/02/27 2:07 a.m.10 views

CVE-2025-21722

In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is referenced Patch series "nilfs2: protect busy buffer heads from being force-cleared". This series fixes the buffer head state inconsistency issues reported by syzbot that occurs when...

7.8CVSS6.2AI score0.00201EPSS
SaveExploits0
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.9 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix the issue of failing to release the skbuff in seg6inputcore. The seg6input function is responsible for adding the SRH into a packet, delegating this operation to seg6inputcore. This function uses skbcowhead to ensur...

6.2CVSS5.8AI score0.00224EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/06 4:28 p.m.7 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: net: use a bounce buffer for copying skb-mark syzbot found arm64 builds would crash in sockrecvmark when CONFIGHARDENEDUSERCOPY=y x86 and powerpc are not detecting the issue because they define useraccessbegin. This will be handl...

7.1CVSS6.6AI score0.00227EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/28 12:00 a.m.12 views

PT-2024-36995 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the ext4 file system's buffer head read fault injection. This occurs because the completion of buffer head read and the buffer head fault...

7.1AI score
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2024/12/05 12:16 a.m.8 views

SUSE CVE-2024-53130

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint When using the "block:blockdirtybuffer" tracepoint, markbufferdirty may cause a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens...

5.5CVSS7.8AI score0.00229EPSS
SaveExploits0References17
NVD
NVD
added 2024/12/04 3:15 p.m.21 views

CVE-2024-53130

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint When using the "block:blockdirtybuffer" tracepoint, markbufferdirty may cause a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens...

5.5CVSS0.00229EPSS
SaveExploits0References10
OSV
OSV
added 2024/12/04 2:20 p.m.13 views

CVE-2024-53130 nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint When using the "block:blockdirtybuffer" tracepoint, markbufferdirty may cause a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens...

6.2AI score
SaveExploits0References13
Cvelist
Cvelist
added 2024/12/04 2:20 p.m.28 views

CVE-2024-53130 nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint When using the "block:blockdirtybuffer" tracepoint, markbufferdirty may cause a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens...

0.00229EPSS
SaveExploits0References8
CVE
CVE
added 2024/12/04 2:20 p.m.346 views

CVE-2024-53130

CVE-2024-53130 affects the Linux kernel nilfs2 code. The issue is a NULL pointer dereference in the block_dirty_buffer tracepoint when using mark_buffer_dirty(), caused by bh->b_bdev->bd_dev being dereferenced even if the buffer head lacks a block_device pointer. The kernel fix makes nilfs_...

5.5CVSS6.5AI score0.00229EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2024/12/02 2:15 p.m.2 views

DEBIAN-CVE-2024-53112

In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...

5.5CVSS5.9AI score0.00254EPSS
SaveExploits0References1
Rows per page
Query Builder