Lucene search
K

23 matches found

SUSE CVE
SUSE CVE
added 2026/05/28 3:53 a.m.6 views

SUSE CVE-2026-46078

In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary-checks for nameoffs, but the trailing dirents are special since the namelens are calculated with strnlen with unchecked nameoff...

7.1CVSS5.7AI score0.00013EPSS
Exploits0References3
NVD
NVD
added 2026/05/27 2:17 p.m.5 views

CVE-2026-46078

In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary-checks for nameoffs, but the trailing dirents are special since the namelens are calculated with strnlen with unchecked nameoff...

7.1CVSS0.00013EPSS
Exploits0References6
OSV
OSV
added 2026/05/27 2:17 p.m.1 views

UBUNTU-CVE-2026-46078

In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary-checks for nameoffs, but the trailing dirents are special since the namelens are calculated with strnlen with unchecked nameoff...

7.1CVSS5.7AI score0.00013EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:58 p.m.5 views

CVE-2026-46078

In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary-checks for nameoffs, but the trailing dirents are special since the namelens are calculated with strnlen with unchecked nameoff...

7.1CVSS5.7AI score0.00013EPSS
Exploits0References7Affected Software1
CVE
CVE
added 2026/05/27 12:58 p.m.12 views

CVE-2026-46078

Summary: CVE-2026-46078 affects the Linux kernel EROFS filesystem, where trailing dirents can trigger an out-of-bounds read due to incorrect nameoff handling. The root cause is that namelen calculations for trailing dirents use strnlen with unchecked nameoffs, allowing underflow when nameoff >...

7.1CVSS5.8AI score0.00013EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/05/27 12:58 p.m.29 views

CVE-2026-46078 erofs: fix the out-of-bounds nameoff handling for trailing dirents

In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary-checks for nameoffs, but the trailing dirents are special since the namelens are calculated with strnlen with unchecked nameoff...

7.1CVSS0.00013EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2026/05/27 12:0 a.m.3 views

CVE-2026-46078

erofs: fix the out-of-bounds nameoff handling for trailing dirents...

7.1CVSS5.8AI score0.00013EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/27 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-46078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary- checks for nameoffs, but the trailing dirents are special...

7.1CVSS5.8AI score0.00013EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.5 views

PT-2026-43945

In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary-checks for nameoffs, but the trailing dirents are special since the namelens are calculated with strnlen with unchecked nameoff...

5.8AI score0.00013EPSS
Exploits0References6
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix information leak in f2fsmoveinlinedirents When converting an inline directory to a regular one, f2fs is leaking uninitialized memory to disk because it doesn't initialize the entire directory block. Fix this by...

5.3AI score0.0004EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/05/02 1:25 a.m.6 views

SUSE CVE-2026-31694

In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuseadddirenttocache computes a serialized dirent size from the server-controlled namelen field and copies the dirent into a single page-cache page. The existing logic only checks...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References22
Tenable Nessus
Tenable Nessus
added 2026/05/02 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-31694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: reject oversized dirents in page cache fuseadddirenttocache computes a serialized dirent size from the server-controlled namelen field and copies the dire...

7.8CVSS5.9AI score0.00015EPSS
Exploits0References4
NVD
NVD
added 2026/05/01 2:16 p.m.1 views

CVE-2026-31694

In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuseadddirenttocache computes a serialized dirent size from the server-controlled namelen field and copies the dirent into a single page-cache page. The existing logic only checks...

7.8CVSS0.00015EPSS
Exploits0References8
CVE
CVE
added 2026/05/01 1:53 p.m.7 views

CVE-2026-31694

Summary: CVE-2026-31694 fixes a Linux kernel FUSE directory-entry handling flaw. A malicious FUSE server could cause a 24-byte overflow by returning a dirent whose serialized size (based on namelen) exceeds a single PAGE_SIZE. The bug arises in fuse_add_dirent_to_cache(), which previously only ch...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/01 1:53 p.m.1 views

CVE-2026-31694

In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuseadddirenttocache computes a serialized dirent size from the server-controlled namelen field and copies the dirent into a single page-cache page. The existing logic only checks...

5.8AI score0.00015EPSS
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/01 12:0 a.m.2 views

PT-2026-36324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fuse add dirent to cache function where the system computes a serialized directory entry dirent size based on the server-controlled namelen field and copies it int...

9.8CVSS5.8AI score0.00078EPSS
Exploits0References56
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007386 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix information leak in f2fsmoveinlinedirents When converting an inline directory to a...

5.8AI score0.0004EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/09 3:31 a.m.1 views

EUVD-2023-60110

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix information leak in f2fsmoveinlinedirents When converting an inline directory to a regular one, f2fs is leaking uninitialized memory to disk because it doesn't initialize the entire directory block. Fix this by...

5.7AI score0.0004EPSS
Exploits0References9
NVD
NVD
added 2025/12/09 1:16 a.m.2 views

CVE-2023-53796

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix information leak in f2fsmoveinlinedirents When converting an inline directory to a regular one, f2fs is leaking uninitialized memory to disk because it doesn't initialize the entire directory block. Fix this by...

0.0004EPSS
Exploits0References8
OSV
OSV
added 2025/12/09 1:16 a.m.0 views

UBUNTU-CVE-2023-53796

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix information leak in f2fsmoveinlinedirents When converting an inline directory to a regular one, f2fs is leaking uninitialized memory to disk because it doesn't initialize the entire directory block. Fix this by...

5.7AI score0.0004EPSS
Exploits0References11
Rows per page
Query Builder