ffs

FFS - F File System This is a cli tool for searching files like grep that does not use the OS kernel to read files, but reads your disks directly. It is practically useless, but insanely cool. this is just 1.5k lines of C code that: requires sudo only when reading a raw device node e.g. /dev/rdis...

extundelete

extundelete ext3 or ext4 undelete utility http://extundelete.sourceforge.net/...

LEAF

Linux Evidence Acquisition Framework LEAF Author: Alexandra Cartwright April, 2022 Description Linux Evidence Acquisition Framework LEAF acquires artifacts and evidence from Linux EXT4 systems, accepting user input to customize the functionality of the tool for easier scalability. Offering severa...

CVE-2026-89786

A flaw was found in the ext4 filesystem component of the Linux kernel. The ext4readinlinedir function can read a directory entry header beyond the allocated buffer, leading to an out-of-bounds read. A local attacker could exploit this vulnerability by interacting with the filesystem, potentially...

cve-2017-7374

cve-2017-7374 To trigger the vulnerability, we need a ext4 file system with encryption support and create a encrypted directory...

ROS-20261013-73-0011

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to incomplete recognition of the internal state. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8634-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8634-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-8631-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8631-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated...

USN-8905-2 linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8905-1 linux-gcp-6.8, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8884-1: U-Boot vulnerabilities

Timo Preißl discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An attacker could possibly use this issue to trigger an integer overflow and out-of-bounds memory access, resulting in arbitrary code execution or a denial of service. CVE-2025-70290 Timo Preißl...

ROS-20261006-73-0405

The vulnerability of the ext4featuresetok function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system is related to improper validation of consistency in input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

ROS-20261006-73-0403

The vulnerability of the functions ext4registersysfs and ext4unregistersysfs in the fs/ext4/sysfs.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20261006-73-0407

The vulnerability of the ext4extcorrectindexes function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ext4: fixed an issue where the buffer of extents was freed twice. In ext4exttrytomergeup, the path1.pbh was set to NULL after it was released. Otherwise, it might be released twice. An example of what triggers this is as...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Remove ppath from ext4extreplayupdateex to avoid double-free. When calling ext4forcesplitextentat&ppath in ext4extreplayupdateex, ppath is updated, but it is path that is freed. This potentially triggers a double-free in th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: Convert inline data to extents when truncate exceeds inline size A check has been added to ext4setattr to convert files from inline data storage to extent-based storage when the truncate function increases the file size...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed a use-after-free in ext4orphancleanup. I identified the issue as follows: BUG: KASAN: Use-after-free in listaddvalid+0x28/0x1a0. Read of size 8 at address ffff88814b13f378 by task mount/710. CPU: 1 PID: 710 Comm:...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: checks dot and dotdot of dxroot before making dir indexed Syzbot reports the following issue: ============================================ BUG: Unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: Fix for leaking uninitialized memory in the fast-commit journal When space at the end of the fast-commit journal blocks is unused, make sure to zero it out so that uninitialized memory is not leaked to the disk...