ROS-20260804-73-0030

The vulnerability of the f2fsfreedic function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-64485

In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task creation error unwind sndcomprtasknew allocates the driver task before validating the returned DMA buffers and reserving file descriptors. When either of those later steps fails, the core frees its task...

TencentOS Server 2: perl-IO-Compress (TSSA-2026:0652)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0652 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

EUVD-2026-32048

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. parseOutputGlob wraps the caller-supplied output glob string in double quotes and stores it in the parser state; getFiles then runs the stored expression through eval...

The vulnerability of the f2fs_write_raw_pages() function in the fs/f2fs/compress.c module of the F2FS file system in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the f2fswriterawpages function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a remote attacker to cause service failure...

The vulnerability of the set_cluster_dirty() function in the fs/f2fs/compress.c module of the F2FS file system support in Linux kernel allows a malicious actor to gain access to protected information or cause service failures.

The vulnerability of the setclusterdirty function in the fs/f2fs/compress.c module of the F2FS file system support in Linux kernel relates to incorrect input validation. Exploiting this vulnerability may allow an attacker to access protected information or cause service failures...

CVE-2020-36846

A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library. Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a "one-shot" decompression request to a scrip...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from a vulnerability in the f2fs:compress module...