Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cachefiles: corrected the incorrect dentry reference count in cachefilescull. The patch mentioned below changed cachefilesburyobject to expect two references to the ‘rep’ dentry. Three of the caller functions were changed to use...

EUVD-2026-27622

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix incorrect dentry refcount in cachefilescull The patch mentioned below changed cachefilesburyobject to expect 2 references to the 'rep' dentry. Three of the callers were changed to use startremovingdentry which tak...

CVE-2026-43106 cachefiles: fix incorrect dentry refcount in cachefiles_cull()

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix incorrect dentry refcount in cachefilescull The patch mentioned below changed cachefilesburyobject to expect 2 references to the 'rep' dentry. Three of the callers were changed to use startremovingdentry which tak...

CVE-2026-43106

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix incorrect dentry refcount in cachefilescull The patch mentioned below changed cachefilesburyobject to expect 2 references to the 'rep' dentry. Three of the callers were changed to use startremovingdentry which tak...

PT-2026-37416

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles cull function where an incorrect dentry reference count is handled. Specifically, the function calls cachefiles bury object without providing the requir...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: cachefiles: Fixed the dentry leak in cachefilesopenfile. A dentry leak may occur when a lookup cookie and a cull operation are performed concurrently. P1 | P2 -----------------------------------------------------------...

Google Chrome Script Handler XSS

The vulnerability of JavaScript script handlers in Google Chrome browsers is related to buffer overflow in the “cull” mechanism. Exploiting this vulnerability allows a malicious actor to partially compromise the confidentiality, integrity, and accessibility of the protected information through a...

Adobe InDesign Buffer Overflow Code Execution

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the overflowing buffer in the “cull” area. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created file...

Adobe InDesign Buffer Overflow Code Execution

The vulnerability of Adobe InDesign’s computer layout automation tool is related to an overflow in the “bucket” buffer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created file...

Adobe InDesign Buffer Overflow Code Execution

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the overflowing buffer in the “cull” area. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

SUSE CVE-2024-49870

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in cachefilesopenfile A dentry leak may be caused when a lookup cookie and a cull are concurrent: P1 | P2 ----------------------------------------------------------- cachefileslookupcookie...

DEBIAN-CVE-2024-49870

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in cachefilesopenfile A dentry leak may be caused when a lookup cookie and a cull are concurrent: P1 | P2 ----------------------------------------------------------- cachefileslookupcookie...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to buffer overflow in the “cull” mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted HTML page...

FFmpeg ff_gaussian_blur_8 Component Code Execution

The vulnerability of the ffgaussianblur8 component libavfilter/edgetemplate.c in the FFmpeg multimedia library is related to buffer overflow in the “cull” function. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Siemens Solid Edge Buffer Overflow

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to buffer overflow in the “cull” process. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created PAR files...

DOPSoft Buffer Overflow Code Execution

The vulnerability of the DOPSoft software, designed for programming Delta Electronics’ DOP-100 series operator panels, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Advantech WebAccess HMI Designer Buffer Overflow

The vulnerability of the software package for creating human-machine interfaces, Advantech WebAccess HMI Designer, arises due to an overflow in the buffer in the “cull” area. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted .pm3 files...