UBUNTU-CVE-2022-50818

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix runningreq for internal abort commands Disabling the remote phy for a SATA disk causes a hang: root@none$ more /sys/class/sasphy/phy-0:0:8/targetportprotocols sata root@none$ echo 0...

CVE-2023-54209 block: fix blktrace debugfs entries leakage

In the Linux kernel, the following vulnerability has been resolved: block: fix blktrace debugfs entries leakage Commit 99d055b4fd4b "block: remove per-disk debugfs files in blkunregisterqueue" moves blktraceshutdown from blkreleasequeue to blkunregisterqueue, this is safe if blktrace is created...

CVE-2023-54209

CVE-2023-54209 — In the Linux kernel, a leak of debugfs entries for blktrace could occur when a disk is closed after del_gendisk() if blktrace remained enabled via an ioctl opened before del_gendisk. The fix moves blktrace shutdown to disk_release() and relies on the reentrancy of blk_trace_remov...

CVE-2022-50818 scsi: pm8001: Fix running_req for internal abort commands

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix runningreq for internal abort commands Disabling the remote phy for a SATA disk causes a hang: root@none$ more /sys/class/sasphy/phy-0:0:8/targetportprotocols sata root@none$ echo 0...

PT-2025-53996

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of initial ramdisks initrd on m68k platforms where physical memory does not start at address zero, such as on Amiga systems...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992464 advisory. In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10removedisk when running the lvm tes...

The vulnerability of the Paragon Hard Disk Manager software allows a perpetrator to modify any files they choose.

The vulnerability of the Paragon Hard Disk Manager software is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to modify arbitrary files...

[SECURITY] Fedora 43 Update: duc-1.4.6-1.fc43

Duc is a collection of tools for indexing, inspecting and visualizing disk usage. Duc maintains a database of accumulated sizes of directories of the file system, and allows you to query this database with some tools, or create fancy graphs showing you where your bytes are...

[SECURITY] Fedora 43 Update: gdu-5.32.0-1.fc43

Fast disk usage analyzer with console interface written in Go...

[SECURITY] Fedora 42 Update: gdu-5.32.0-1.fc42

Fast disk usage analyzer with console interface written in Go...

New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper

Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that's delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app installer to bypass Apple's Gatekeeper checks. "Unlike earlier MacSync Stealer variant...

CVE-2022-50755

In the Linux kernel, the following vulnerability has been resolved: udf: Avoid double brelse in udfrename syzbot reported a warning like below 1: VFS: brelse: Trying to free free buffer WARNING: CPU: 2 PID: 7301 at fs/buffer.c:1145 brelse+0x67/0xa0 ... Call Trace: invalidatebhlru+0x99/0x150...

UBUNTU-CVE-2023-54140

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix WARNING in markbufferdirty due to discarded buffer reuse A syzbot stress test using a corrupted disk image reported that markbufferdirty called from nilfsmarkinodedirty or nilfspalloccommitallocentry may output a kern...

CVE-2022-50715

In the Linux kernel, the following vulnerability has been resolved: md/raid1: stop mdxraid1 thread when raid1 array run failed fail run raid1 array when we assemble array with the inactive disk only, but the mdxraid1 thread were not stop, Even if the associated resources have been released. it wi...

CVE-2022-50715

In the Linux kernel, the following vulnerability has been resolved: md/raid1: stop mdxraid1 thread when raid1 array run failed fail run raid1 array when we assemble array with the inactive disk only, but the mdxraid1 thread were not stop, Even if the associated resources have been released. it wi...

CVE-2022-50755 udf: Avoid double brelse() in udf_rename()

In the Linux kernel, the following vulnerability has been resolved: udf: Avoid double brelse in udfrename syzbot reported a warning like below 1: VFS: brelse: Trying to free free buffer WARNING: CPU: 2 PID: 7301 at fs/buffer.c:1145 brelse+0x67/0xa0 ... Call Trace: invalidatebhlru+0x99/0x150...

CVE-2022-50715 md/raid1: stop mdx_raid1 thread when raid1 array run failed

In the Linux kernel, the following vulnerability has been resolved: md/raid1: stop mdxraid1 thread when raid1 array run failed fail run raid1 array when we assemble array with the inactive disk only, but the mdxraid1 thread were not stop, Even if the associated resources have been released. it wi...

PT-2025-53019

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.146 Description The Linux kernel contains a flaw in the md/raid1 subsystem. Specifically, when a RAID1 array run fails during assembly with an inactive disk, the mdx raid1 thread does not stop, even after...

The vulnerability in the `zzip_disk_entry_to_file_header` function of the `mmapped.c` file in the Zziplib compression library allows a attacker to cause a service failure.

The vulnerability of the zzipdiskentrytofileheader function in the mmapped.c file of the Zziplib compression library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

Apple macOS Tahoe Insufficient Privilege Restriction Vulnerability

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from a permission restriction insufficiency vulnerability that stems from a flaw in the system'...