Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbDiscardAG. This fix should apply to most URSAN bugs that were recently detected by syzbot, by addressing the issue related to dbMount. Since syzbot is allegedly feeding invalid data into the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Fixed an out-of-bounds issue in dbNextAG and diAlloc. In dbNextAG, there was no check for the case where bmp-dbnumag is greater than or equal to MAXAG due to a corrupted image, which could lead to an out-of-bounds...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013783 advisory. In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds i...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007414)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007414 advisory. In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds i...

ROS-20260414-73-0038

A vulnerability in the dbMount function in the fs/jfs/jfsdmap.c module of the JFS file system of the Linux operating system kernel is related to reading beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to protected information or cause a denial of...

ROS-20260304-73-0029

A vulnerability in the dbMount function of the Linux kernel is related to reading memory outside of the allocated buffer. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality of protected information...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005519 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG and diAlloc In dbNextAG , there is no check for the case where...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38230)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38230 advisory. - In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount t...

The vulnerability of the dbMount() function in the fs/jfs/jfs_dmap.c module, which supports the JFS file system in Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c module, which supports the JFS file system in Linux operating systems, is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Validated AG parameters in dbMount to prevent crashes. Validated dbagheight, dbagwidth, and dbagstart in dbMount to catch corrupted metadata early and avoid undefined behavior in dbAllocAG. The limits are derived from...

The vulnerability of the dbMount function in the Linux operating system, which allows a hacker to compromise the confidentiality of protected information

The vulnerability of the dbMount function in the Linux operating system’s kernel relates to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality of the protected information...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Out-of-bounds Read (CVE-2024-47723)

In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG and diAlloc In dbNextAG , there is no check for the case where bmp-dbnumag is greater or same than MAXAG due to a polluted image, which causes an out-of-bounds. Therefore, a bounds check should ...

SUSE CVE-2022-50567

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...

CVE-2022-50567

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...

UBUNTU-CVE-2022-50567

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...

CVE-2022-50567

CVE-2022-50567 affects the Linux kernel, specifically the JFS filesystem in function dbAllocAG. The crash arises from a shift-out-of-bounds due to missing validation of bmp->db_agl2size (can exceed 64). The fix adds a check in dbMount and enforces an upper bound (L2MAXL2SIZE − L2MAXAG); this r...

CVE-2022-50567 fs: jfs: fix shift-out-of-bounds in dbAllocAG

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...

EUVD-2025-20026

Malicious code in bioql PyPI...

SUSE CVE-2022-50333

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbDiscardAG This should be applied to most URSAN bugs found recently by syzbot, by guarding the dbMount. As syzbot feeding rubbish into the bmap descriptor...

UBUNTU-CVE-2022-50333

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbDiscardAG This should be applied to most URSAN bugs found recently by syzbot, by guarding the dbMount. As syzbot feeding rubbish into the bmap descriptor...