DEBIAN-CVE-2023-53100

In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in ext4updateinlinedata Syzbot found the following issue: EXT4-fs loop0: mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. fscrypt: AES-256-CTS-CBC using implementation...

DEBIAN-CVE-2023-52786

In the Linux kernel, the following vulnerability has been resolved: ext4: fix racy may inline data check in dio write syzbot reports that the following warning from ext4iomapbegin triggers as of the commit referenced below: if WARNONONCEext4hasinlinedatainode return -ERANGE; This occurs during a...

UBUNTU-CVE-2023-52786

In the Linux kernel, the following vulnerability has been resolved: ext4: fix racy may inline data check in dio write syzbot reports that the following warning from ext4iomapbegin triggers as of the commit referenced below: if WARNONONCEext4hasinlinedatainode return -ERANGE; This occurs during a...

OESA-2024-1033 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: openeuler-linux-kernel-5.10.149-ext4writeinlinedata-kernelbug-365020CVE-2021-33631 An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravbremove in...

OESA-2024-1030 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: openeuler-linux-kernel-4.19.0-cbsdestroy-NULL-ptr-deref-391216CVE-2021-33630 openeuler-linux-kernel-5.10.149-ext4writeinlinedata-kernelbug-365020CVE-2021-33631 An out-of-bounds read vulnerability was found in the NVMe-oF/TCP...

PT-2024-1443 · Openeuler +7 · Openeuler Kernel +7

Name of the Vulnerable Software and Affected Versions: openEuler kernel versions 4.19.90 through 4.19.90-2401.3 openEuler kernel versions 5.10.0-60.18.0 through 5.10.0-183.0.0 Description: The issue is related to an integer overflow in the ext4 write inline data end function of the openEuler kern...

SUSE CVE-2018-11412

In the Linux kernel 4.13 through 4.16.11, ext4readinlinedata in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that stores the system.data extended attribute value in a dedicated inode...

SUSE CVE-2021-40490

A race condition was discovered in ext4writeinlinedataend in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13...

OESA-2021-1366 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A race condition was discovered in ext4writeinlinedataend in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.CVE-2021-40490 A flaw was found in the KVM's AMD code for supporting SVM nested virtualizatio...

PT-2021-4245 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions up to 5.13.13 Description: A race condition was discovered in the ext4 write inline data end function in the ext4 subsystem. This issue may allow an attacker to impact the integrity, availability, and confidentiality of...

Medium: kernel

Issue Overview: The fs/ext4/inline.c:ext4readinlinedata function in the Linux kernel performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that stores the system.data extended attribute value in a dedicated inode. The unbound copy can cause memor...

UBUNTU-CVE-2018-11412

In the Linux kernel 4.13 through 4.16.11, ext4readinlinedata in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that stores the system.data extended attribute value in a dedicated inode...