UBUNTU-CVE-2022-49553

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT sectorsperclusters When the NTFS BOOT sectorsperclusters field is 0x80, it represents a shift value. Make sure that the shift value is not too large before using it NTFS max cluster size is 2MB. Return...

UBUNTU-CVE-2022-49337

In the Linux kernel, the following vulnerability has been resolved: ocfs2: dlmfs: fix error handling of userdlmdestroylock When userdlmdestroylock failed, it didn't clean up the flags it set before exit. For USERLOCKINTEARDOWN, if this function fails because of lock is still in used, next time wh...

UBUNTU-CVE-2022-49274

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix crash when mount with quota enabled There is a reported crash when mounting ocfs2 with quota enabled. RIP: 0010:ocfs2qinfolockresinit+0x44/0x50 ocfs2 Call Trace: ocfs2localreadinfo+0xb9/0x6f0 ocfs2...

CVE-2022-49560

Summary: CVE-2022-49560 affects the Linux kernel exfat code. A slab-out-of-bounds read in exfat_clear_bitmap was triggered by truncating to size 0, reported by Syzbot. Root cause/fix in connected docs: the patch moves the is_valid_cluster() helper from fatent.c to a common header to allow reuse, ...

CVE-2022-49560 exfat: check if cluster num is valid

In the Linux kernel, the following vulnerability has been resolved: exfat: check if cluster num is valid Syzbot reported slab-out-of-bounds read in exfatclearbitmap. This was triggered by reproducer calling truncute with size 0, which causes the following trace: BUG: KASAN: slab-out-of-bounds in...

CVE-2022-49560

In the Linux kernel, the following vulnerability has been resolved: exfat: check if cluster num is valid Syzbot reported slab-out-of-bounds read in exfatclearbitmap. This was triggered by reproducer calling truncute with size 0, which causes the following trace: BUG: KASAN: slab-out-of-bounds in...

CVE-2022-49560 exfat: check if cluster num is valid

In the Linux kernel, the following vulnerability has been resolved: exfat: check if cluster num is valid Syzbot reported slab-out-of-bounds read in exfatclearbitmap. This was triggered by reproducer calling truncute with size 0, which causes the following trace: BUG: KASAN: slab-out-of-bounds in...

CVE-2022-49553

The CVE-2022-49553 entry is about the Linux kernel NTFS3 filesystem (fs/ntfs3/super.c). The vulnerability arises when the NTFS BOOT sectors_per_clusters field is > 0x80, which is treated as a shift value; if the shift is too large, the code may compute invalid shifts (max NTFS cluster size is ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from exfat not verifying the validity of cluster numbers, which could lead to out-of-bounds reads...

PT-2025-8486 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the fs/ntfs3 module. The issue arises when the NTFS BOOT sectors per clusters field has a value greater than 0x80...

RHEL 8 / 9 : OpenShift Container Platform 4.14.48 (RHSA-2025:1453)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1453 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

Important: Red Hat Security Advisory: Cluster Observability Operator 1.0.0

The Cluster Observability Operator COO is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions CRDs. With this release, COO gets to GA availability...

SUSE CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

SUSE CVE-2024-23445

It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.htmlsecurity-api-create-cross-cluster-api-key-request-body restricts search for a given index using the query or the fieldsecurity parameter, an...

GHSA-JGFP-53C3-624W vulnerabilities

Vulnerabilities for packages: calico, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, argo-rollouts, spark-operator-fips, nodetaint, azuredisk-csi, aws-ebs-csi-driver, spark-operator, kapp-fips, cluster-autoscaler, ip-masq-agent, kubernetes-fips, cluster-autoscaler-fips,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: calico, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, argo-rollouts, spark-operator-fips, nodetaint, azuredisk-csi, aws-ebs-csi-driver, spark-operator, kapp-fips, cluster-autoscaler, ip-masq-agent, kubernetes-fips, cluster-autoscaler-fips,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.34 security and extras update

Red Hat OpenShift Container Platform release 4.16.34 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a security impact of...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Added bounds checking to ocfs2checkdirentry. This adds sanity checks for ocfs2direntry to ensure that all members of ocfs2direntry do not go beyond the valid memory region...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Reserving space for inline xattr before attaching the reflink tree. One of our customers reported a crash and a corrupted ocfs2 filesystem. The crash was due to the detection of corruption. Upon troubleshooting, the fsck -...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: does not allow unaligned truncation on released compress inode An F2FS image may become corrupted after performing the following test cases: - mkfs.f2fs -O extraattr,compression -f /dev/vdb - mount /dev/vdb...