718 matches found
UBUNTU-CVE-2022-50743
In the Linux kernel, the following vulnerability has been resolved: erofs: Fix pcluster memleak when its block address is zero syzkaller reported a memleak: https://syzkaller.appspot.com/bug?id=62f37ff612f0021641eda5b17f056f1668aa9aed unreferenced object 0xffff88811009c7f8 size 136: ... backtrace...
CVE-2023-54132
Mode C: The CVE-2023-54132 issue affects the EROFS file system in the Linux kernel: erofs stops parsing non-compact HEAD index when clusterofs is invalid, which can trigger a local privilege/denial-like fault via a crafted image and cause a kernel page fault. The vulnerability was addressed in ke...
CVE-2023-54132 erofs: stop parsing non-compact HEAD index if clusterofs is invalid
In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a crafted image 1 with a non-compact HEAD index of clusterofs 33024 while valid numbers should be 0 lclustersize-1, which causes the following...
CVE-2023-54132 erofs: stop parsing non-compact HEAD index if clusterofs is invalid
In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a crafted image 1 with a non-compact HEAD index of clusterofs 33024 while valid numbers should be 0 lclustersize-1, which causes the following...
CVE-2022-50746 erofs: validate the extent length for uncompressed pclusters
In the Linux kernel, the following vulnerability has been resolved: erofs: validate the extent length for uncompressed pclusters syzkaller reported a KASAN use-after-free: https://syzkaller.appspot.com/bug?extid=2ae90e873e97f1faf6f2 The referenced fuzzed image actually has two issues: - mpa == 0 ...
CVE-2022-50746 erofs: validate the extent length for uncompressed pclusters
In the Linux kernel, the following vulnerability has been resolved: erofs: validate the extent length for uncompressed pclusters syzkaller reported a KASAN use-after-free: https://syzkaller.appspot.com/bug?extid=2ae90e873e97f1faf6f2 The referenced fuzzed image actually has two issues: - mpa == 0 ...
CVE-2022-50746
CVE-2022-50746 affects the Linux kernel’s erofs module where an invalid extent length for uncompressed pclusters could lead to a use-after-free observed by syzkaller. The issue is due to insufficient validation of the extent length; the first inlined-pcluster issue (m_pa == 0) has been addressed ...
CVE-2022-50743
Summary (CVE-2022-50743): In the Linux kernel’s erofs subsystem, a memleak occurs when a non-inline pcluster has a zero block address during readahead. Syzkaller reproduced a case in z_erofs_register_pcluster() where map->m_pa is zero and ztailpacking is false, causing pcl->obj.index to be ...
CVE-2022-50743 erofs: Fix pcluster memleak when its block address is zero
In the Linux kernel, the following vulnerability has been resolved: erofs: Fix pcluster memleak when its block address is zero syzkaller reported a memleak: https://syzkaller.appspot.com/bug?id=62f37ff612f0021641eda5b17f056f1668aa9aed unreferenced object 0xffff88811009c7f8 size 136: ... backtrace...
CVE-2022-50743 erofs: Fix pcluster memleak when its block address is zero
In the Linux kernel, the following vulnerability has been resolved: erofs: Fix pcluster memleak when its block address is zero syzkaller reported a memleak: https://syzkaller.appspot.com/bug?id=62f37ff612f0021641eda5b17f056f1668aa9aed unreferenced object 0xffff88811009c7f8 size 136: ... backtrace...
EUVD-2025-205093
In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...
CVE-2025-68361
In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...
CVE-2025-68361
In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...
UBUNTU-CVE-2025-68361
In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...
CVE-2025-68361 erofs: limit the level of fs stacking for file-backed mounts
In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...
CVE-2025-68361
CVE-2025-68361 relates to the Linux kernel's EROFS file system. The issue is addressed by a patch that limits the level of file-backed filesystem stacking, mitigating a potential kernel stack overflow (for example, when EROFS mounts itself). The connected documents consistently describe the fix i...
CVE-2025-68361 erofs: limit the level of fs stacking for file-backed mounts
In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...
Linux Distros Unpatched Vulnerability : CVE-2025-68361
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself. CVE-2025-683...
Linux Distros Unpatched Vulnerability : CVE-2022-50746
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: validate the extent length for uncompressed pclusters syzkaller reported a KASAN use-after-free:...
Linux Distros Unpatched Vulnerability : CVE-2022-50743
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: Fix pcluster memleak when its block address is zero syzkaller reported a memleak:...