CVE-2025-38627

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix UAF of f2fsinodeinfo in f2fsfreedic The decompressioctx may be released asynchronously after I/O completion. If this file is deleted immediately after read, and the kworker of processing postreadwq has not bee...

c-blosc:compress_fuzzer: Use-of-uninitialized-value in blosc_run_decompression_with_context

Project: https://github.com/Blosc/c-blosc.git Detailed Report: https://oss-fuzz.com/testcase?key=5099361839742976 Project: c-blosc Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer Job Type: libfuzzermsanc-blosc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in blosc_run_decompression_with_context

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5134776284610560 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...