Lucene search
K

41 matches found

Positive Technologies
Positive Technologies
added 2026/05/06 12:0 a.m.4 views

PT-2026-37386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the OCFS2 file system where the ocfs2 validate inode block function fails to validate the size of inline data when reading an inode from disk. In cases of filesystem...

7.8CVSS5.3AI score0.00017EPSS
Exploits0References18
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-15841

Malicious code in bioql PyPI...

7.7AI score0.00075EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-15840

Malicious code in bioql PyPI...

7.7AI score0.00041EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-13207

Malicious code in bioql PyPI...

6.3AI score0.00111EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-11184

Malicious code in bioql PyPI...

7AI score0.0003EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/09/04 3:32 p.m.9 views

CVE-2025-38698 jfs: Regular file corruption check

In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative isize value. Add a check when opening this file to avoid subsequent operation failures...

0.00018EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/08/27 3:33 p.m.0 views

kernel: ext4: avoid resizing to a partial cluster size

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration...

5.5CVSS6.3AI score0.00051EPSS
Exploits0References5
OSV
OSV
added 2025/07/04 1:37 p.m.4 views

CVE-2025-38230 jfs: validate AG parameters in dbMount() to prevent crashes

In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount to prevent crashes Validate dbagheight, dbagwidth, and dbagstart in dbMount to catch corrupted metadata early and avoid undefined behavior in dbAllocAG. Limits are derived from L2LPERCTL,...

7.8CVSS7.3AI score0.00056EPSS
Exploits0References13
NVD
NVD
added 2025/06/18 11:15 a.m.3 views

CVE-2022-50205

In the Linux kernel, the following vulnerability has been resolved: ext2: Add more validity checks for inode counts Add checks verifying number of inodes stored in the superblock matches the number computed from number of inodes per group. Also verify we have at least one block worth of inodes pe...

5.5CVSS0.00051EPSS
Exploits0References8
OSV
OSV
added 2025/06/18 11:3 a.m.4 views

CVE-2022-50205 ext2: Add more validity checks for inode counts

In the Linux kernel, the following vulnerability has been resolved: ext2: Add more validity checks for inode counts Add checks verifying number of inodes stored in the superblock matches the number computed from number of inodes per group. Also verify we have at least one block worth of inodes pe...

5.5CVSS6AI score0.00051EPSS
Exploits0References11
OSV
OSV
added 2025/06/18 11:1 a.m.6 views

CVE-2022-50028 gadgetfs: ep_io - wait until IRQ finishes

In the Linux kernel, the following vulnerability has been resolved: gadgetfs: epio - wait until IRQ finishes after usbepqueue if waitforcompletioninterruptible is interrupted we need to wait until IRQ gets finished. Otherwise complete from epiocomplete can corrupt stack...

5.5CVSS6AI score0.00051EPSS
Exploits0References11
OSV
OSV
added 2025/05/20 4:58 p.m.6 views

CVE-2025-37981 scsi: smartpqi: Use is_kdump_kernel() to check for kdump

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use iskdumpkernel to check for kdump The smartpqi driver checks the resetdevices variable to determine whether special adjustments need to be made for kdump. This has the effect that after a regular kexec reboot,...

7.8CVSS6.6AI score0.00061EPSS
Exploits0References6
OSV
OSV
added 2025/05/02 3:55 p.m.5 views

CVE-2023-53043 arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent If the controller is not marked as cache coherent, then kernel will try to ensure coherency during dma-ops and that may cause data corruption. So, mark the PCIe nod...

5.5CVSS6.1AI score0.00111EPSS
Exploits0References6
NVD
NVD
added 2025/03/27 5:15 p.m.8 views

CVE-2022-49739

In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed inline inodes is within the allowed range when reading inodes from disk gfs2dinodein. This prevents us from on-disk corruption. The two checks in...

5.5CVSS0.00011EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/03/27 4:42 p.m.6 views

CVE-2022-49739 gfs2: Always check inode size of inline inodes

In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed inline inodes is within the allowed range when reading inodes from disk gfs2dinodein. This prevents us from on-disk corruption. The two checks in...

0.00011EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2025/03/27 4:42 p.m.7 views

CVE-2022-49739

In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed inline inodes is within the allowed range when reading inodes from disk gfs2dinodein. This prevents us from on-disk corruption. The two checks in...

5.5CVSS5.4AI score0.00011EPSS
Exploits0
CVE
CVE
added 2025/03/06 3:54 p.m.146 views

CVE-2024-58072

CVE-2024-58072 corresponds to a Linux kernel issue in the rtlwifi subsystem. The fix removes an unused private-data hook (check_buddy_priv) and related data structures that were added to a global private data list. The description states the list and lock were unused and could lead to access of f...

7.8CVSS7.3AI score0.00024EPSS
Exploits0References11Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2022-48786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock: remove vsock from connected table when connect is interrupted by a signal vsockconnect expects that the socket could already be in the TCPESTABLISHED sta...

5.5CVSS6.4AI score0.00014EPSS
Exploits0References3
NVD
NVD
added 2025/02/26 7:0 a.m.10 views

CVE-2022-49172

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix non-access data TLB cache flush faults When a page is not present, we get non-access data TLB faults from the fdc and fic instructions in flushuserdcacherangeasm and flushusericacherangeasm. When these occur, the cach...

7.1CVSS0.00122EPSS
Exploits0References3
OSV
OSV
added 2025/01/11 2:30 p.m.14 views

CVE-2024-57850 jffs2: Prevent rtime decompress memory corruption

In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruption The rtime decompression routine does not fully check bounds during the entirety of the decompression pass and can corrupt memory outside the decompression buffer if the compressed...

7.8CVSS6.3AI score0.0002EPSS
Exploits0References12
Rows per page
Query Builder