Lucene search
K

19 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ubifs: A memory leak was fixed in the dorename function. When renaming a file in an encrypted directory, the function fscryptsetupfilename allocates memory for the file name. This name is never actually used, and before returning...

5.5CVSS5.8AI score0.00021EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992190 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Free memory for tmpfile name When opening a ubifs tmpfile on an encrypted directory,...

5.5CVSS5.9AI score0.00016EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/20 12:25 a.m.2 views

SUSE CVE-2025-68297

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in processv2sparseread for encrypted directories The crash in processv2sparseread for fscrypt-encrypted directories has been reported. Issue takes place for Ceph msgr2 protocol in secure mode. It can be reproduced...

5.5CVSS6.4AI score0.00028EPSS
Exploits0References20
EUVD
EUVD
added 2025/12/16 6:31 p.m.1 views

EUVD-2025-203783

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in processv2sparseread for encrypted directories The crash in processv2sparseread for fscrypt-encrypted directories has been reported. Issue takes place for Ceph msgr2 protocol in secure mode. It can be reproduced...

5.9AI score0.00028EPSS
Exploits0References5
OSV
OSV
added 2025/12/16 4:16 p.m.1 views

UBUNTU-CVE-2025-68297

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in processv2sparseread for encrypted directories The crash in processv2sparseread for fscrypt-encrypted directories has been reported. Issue takes place for Ceph msgr2 protocol in secure mode. It can be reproduced...

5.7AI score0.00028EPSS
Exploits0References23
CVE
CVE
added 2025/12/16 3:6 p.m.9 views

CVE-2025-68297

CVE-2025-68297 concerns the Linux kernel in the context of Ceph msgr2 over fscrypt-encrypted directories. The provided description documents a crash in process_v2_sparse_read() that is triggered when operating on an encrypted Ceph filesystem path (e.g., mounting Ceph fs, creating/encrypting a dir...

6AI score0.00028EPSS
Exploits0References4
OSV
OSV
added 2025/12/16 3:6 p.m.1 views

CVE-2025-68297 ceph: fix crash in process_v2_sparse_read() for encrypted directories

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in processv2sparseread for encrypted directories The crash in processv2sparseread for fscrypt-encrypted directories has been reported. Issue takes place for Ceph msgr2 protocol in secure mode. It can be reproduced...

6.3AI score0.00028EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/12/16 3:6 p.m.25 views

CVE-2025-68297 ceph: fix crash in process_v2_sparse_read() for encrypted directories

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in processv2sparseread for encrypted directories The crash in processv2sparseread for fscrypt-encrypted directories has been reported. Issue takes place for Ceph msgr2 protocol in secure mode. It can be reproduced...

0.00028EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper handling of encrypted directories, which could lead to a crash...

6AI score0.00028EPSS
Exploits0References4
OSV
OSV
added 2025/12/05 6:15 p.m.1 views

UBUNTU-CVE-2025-66549

Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside an end-to-end encrypted directory, the path of the file was sent to the server unencrypted, making it possible for administrators to see it in log files. This vulnerability is...

2.7CVSS5.7AI score0.00032EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/12/05 5:47 p.m.16 views

CVE-2025-66549 Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directory

Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside an end-to-end encrypted directory, the path of the file was sent to the server unencrypted, making it possible for administrators to see it in log files. This vulnerability is...

2.4CVSS0.00032EPSS
Exploits0References4
OSV
OSV
added 2025/09/18 2:15 p.m.0 views

UBUNTU-CVE-2023-53396

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in dorename If renaming a file in an encrypted directory, function fscryptsetupfilename allocates memory for a file name. This name is never used, and before returning to the caller the memory for it is not...

5.5CVSS5.7AI score0.00021EPSS
Exploits0References8
OSV
OSV
added 2025/09/18 1:33 p.m.3 views

CVE-2023-53396 ubifs: Fix memory leak in do_rename

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in dorename If renaming a file in an encrypted directory, function fscryptsetupfilename allocates memory for a file name. This name is never used, and before returning to the caller the memory for it is not...

5.5CVSS6.1AI score0.00021EPSS
Exploits0References8
CVE
CVE
added 2025/09/18 1:33 p.m.15 views

CVE-2023-53396

The CVE-2023-53396 issue affects the Linux kernel ubifs: memory leak in do_rename when renaming a file in an encrypted directory. The leak stems from fscrypt_setup_filename allocating memory for the file name, which is never used and is not freed before returning. kmemleak shows the unreferenced ...

5.5CVSS6.1AI score0.00021EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/18 12:0 a.m.1 views

PT-2025-38375

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the do rename function when renaming a file within an encrypted directory. The fscrypt setup filename function allocates memory for a filename that is never used,...

6.2AI score0.00021EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2025/09/16 8:11 a.m.1 views

CVE-2023-53276 ubifs: Free memory for tmpfile name

In the Linux kernel, the following vulnerability has been resolved: ubifs: Free memory for tmpfile name When opening a ubifs tmpfile on an encrypted directory, function fscryptsetupfilename allocates memory for the name that is to be stored in the directory entry, but after the name has been copi...

6.1AI score0.00016EPSS
Exploits0References9
Fedora
Fedora
added 2025/03/05 1:15 a.m.5 views

[SECURITY] Fedora 41 Update: fscrypt-0.3.5-2.fc41

fscrypt is a high-level tool for the management of Linux filesystem encryptio n. This tool manages metadata, key generation, key wrapping, PAM integration, and provides a uniform interface for creating and modifying encrypted directories...

7.3AI score
Exploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-49298

Name of the Vulnerable Software and Affected Versions Nextcloud Desktop versions prior to 3.16.5 Description Nextcloud Desktop is a desktop sync client for Nextcloud. Before version 3.16.5, the file path was transmitted unencrypted when attempting to manually lock a file within an end-to-end...

2.7CVSS6.4AI score0.00032EPSS
Exploits0References16
OpenVAS
OpenVAS
added 2010/01/13 12:0 a.m.10 views

Get EFS Encrypted Files, Dirs and EFS-Encryption AlgorithmID - Windows

Get EFS Encrypted Files, Dirs and EFS-Encryption AlgorithmID. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
Exploits0
Rows per page
Query Builder