Lucene search
K

25 matches found

OSV
OSV
added 2024/04/04 9:15 a.m.1 views

UBUNTU-CVE-2024-26791

In the Linux kernel, the following vulnerability has been resolved: btrfs: dev-replace: properly validate device names There's a syzbot report that device name buffers passed to device replace are not properly checked for string termination which could lead to a read out of bounds in getnamekerne...

7.1CVSS6.3AI score0.00011EPSS
Exploits0References22
Cvelist
Cvelist
added 2024/04/04 8:20 a.m.16 views

CVE-2024-26791 btrfs: dev-replace: properly validate device names

In the Linux kernel, the following vulnerability has been resolved: btrfs: dev-replace: properly validate device names There's a syzbot report that device name buffers passed to device replace are not properly checked for string termination which could lead to a read out of bounds in getnamekerne...

7.7AI score0.00011EPSS
Exploits0References8
CVE
CVE
added 2024/04/04 8:20 a.m.130 views

CVE-2024-26791

CVE-2024-26791 — Linux kernel: btrfs dev-replace: properly validate device names. A syzbot report indicated device name buffers passed to device replace could read beyond end (getname_kernel) due to insufficient termination checks. The fix adds a helper that validates both source and target devic...

7.1CVSS6.4AI score0.00011EPSS
Exploits0References10Affected Software1
CNNVD
CNNVD
added 2024/04/04 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from btrfs dev-replace not properly validating device names, which could lead to out-of-bounds reads...

7.1CVSS6.3AI score0.00011EPSS
Exploits0References11
OSV
OSV
added 2023/01/17 5:35 p.m.7 views

GSD-2023-1000377 btrfs: handle case when repair happens with dev-replace

btrfs: handle case when repair happens with dev-replace This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

7.2AI score
Exploits0
Rows per page
Query Builder