Lucene search
K

31 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: erofs: fixed an issue where the invalid algorithm was used for encoded extents. The current algorithm sanity checks do not properly apply to newly encoded extents. We need to unify the algorithm checks with the...

5.5CVSS5.7AI score0.0002EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: erofs: Fixed the classification of interlaced plain extents for encoded extents. Only plain data whose start position and on-disk physical length are both aligned to the block size should be classified as interlaced plain extents...

7.1CVSS5.6AI score0.00013EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/05/08 2:20 a.m.4 views

SUSE CVE-2026-43166

In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced plain identification for encoded extents Only plain data whose start position and on-disk physical length are both aligned to the block size should be classified as interlaced plain extents. Otherwise, it mu...

5.7AI score0.00013EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/07 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-43166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: fix interlaced plain identification for encoded extents Only plain data whose start position and on-disk physical length are both aligned to the block si...

7.1CVSS5.8AI score0.00013EPSS
Exploits0References2
CVE
CVE
added 2026/05/06 11:27 a.m.6 views

CVE-2026-43166

CVE-2026-43166 concerns the Linux kernel’s erofs filesystem. A flaw in interlaced plain extent identification occurs when the start position and on-disk physical length are not both aligned to the block size, causing plain data to be misclassified as interlaced instead of shifted. This can lead t...

7.1CVSS5.7AI score0.00013EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/05/06 11:27 a.m.4 views

CVE-2026-43166

In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced plain identification for encoded extents Only plain data whose start position and on-disk physical length are both aligned to the block size should be classified as interlaced plain extents. Otherwise, it mu...

7.1CVSS5.7AI score0.00013EPSS
Exploits0
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerabilities have been resolved: erofs: Fixed invalid cases for encoded extents. Robert recently reported two corrupted images that can cause system crashes. These issues are related to the new encoded extents introduced in Linux 6.15: - The first image has...

5.8AI score0.00026EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-40241

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new...

5.8AI score0.00026EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/05 4:22 p.m.1 views

CVE-2025-40241

In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15: - The first one 1 has plen !...

5.6AI score0.00026EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/05 12:25 a.m.1 views

SUSE CVE-2025-40241

In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15: - The first one 1 has plen !...

6.3AI score0.00026EPSS
Exploits0References3
NVD
NVD
added 2025/12/04 4:16 p.m.1 views

CVE-2025-40241

In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15: - The first one 1 has plen !...

0.00026EPSS
Exploits0References2
OSV
OSV
added 2025/12/04 4:16 p.m.1 views

UBUNTU-CVE-2025-40241

In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15: - The first one 1 has plen !...

5.7AI score0.00026EPSS
Exploits0References10
CVE
CVE
added 2025/12/04 3:31 p.m.5 views

CVE-2025-40241

Summary (CVE-2025-40241): In the Linux kernel, the erofs code fix addresses two crafted invalid extents related to the new encoded extents introduced in Linux 6.15. The issues involve: (1) a crafted plen != 0 case where plen is not zero and the plen mask check fails, affecting representation of s...

5.8AI score0.00026EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/04 3:31 p.m.19 views

CVE-2025-40241 erofs: fix crafted invalid cases for encoded extents

In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15: - The first one 1 has plen !...

0.00026EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/12/04 3:31 p.m.2 views

CVE-2025-40241

In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15: - The first one 1 has plen !...

5.1AI score0.00026EPSS
Exploits0
OSV
OSV
added 2025/12/04 3:31 p.m.1 views

CVE-2025-40241 erofs: fix crafted invalid cases for encoded extents

In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15: - The first one 1 has plen !...

6.1AI score0.00026EPSS
Exploits0References5
EUVD
EUVD
added 2025/12/04 3:31 p.m.1 views

EUVD-2025-201218

In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15: - The first one 1 has plen !...

5.7AI score0.00026EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/04 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from the handling of specially crafted invalid encoded extents that could lead to out-of-bounds access...

6.1AI score0.00026EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.1 views

PT-2025-49068

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.15 and later Description The Linux kernel contains an issue related to encoded extents within the erofs filesystem. Specifically, crafted, invalid images can cause system crashes. This occurs due to improper handling of...

5.3AI score0.03752EPSS
Exploits3References391
EUVD
EUVD
added 2025/10/08 12:30 p.m.2 views

EUVD-2025-31827

The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the cookie in all versions up to, and including, 2.11.21 due to insufficient escaping on the user supplied value and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...

6.5CVSS6.1AI score0.00031EPSS
Exploits0References3
Rows per page
Query Builder