ffs

FFS - F ファイルシステム これは、OSカーネルを介してファイルを読み取るのではなく、ディスクを直接読み取ってファイルを検索するCLIツール（grepのようなもの）です。実用性はほぼありませんが、 ものすごくクール です。 これはわずか約1.5k行のCコードであり、以下の特徴があります： rawデバイスノード（例: /dev/rdisk）を読み取るときだけsudoが必要。イメージファイルの検索には昇格権限は不要 macOSのメインディスク上で実行するにはSIP保護を無効化する必要がある 最近のファイル書き込みの一部を見逃す可能性がある（手動でsyncを呼ぶ必要がある）...

LEAF

Linux 증거 수집 프레임워크 LEAF 저자: Alexandra Cartwright 2022년 4월 설명 Linux 증거 수집 프레임워크LEAF는 Linux EXT4 시스템에서 아티팩트와 증거를 수집하며, 사용자 입력을 받아 도구의 기능을 사용자 정의하여 확장성을 높입니다. 여러 모듈과 매개변수를 입력으로 제공하여 LEAF는 스마트 분석을 통해 Linux 아티팩트를 추출하고 ISO 이미지 파일로 출력할 수 있습니다. 사용법 root@kitploit: LEAFmaster.py -h -i INPUT INPUT ... -o...

CVE-2026-80808

In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without makin...

CVE-2026-80808

CVE-2026-80808 affects the Linux kernel ext4 filesystem. The bug is in ext4_xattr_block_set() , which retries indefinitely when an mbcache entry selected for reuse has a saturated reference count (≥ EXT4_XATTR_REFCOUNT_MAX , 1024). Normally this invariant holds because the count and MBE_REUSABLE_...

EUVD-2026-71243

In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without makin...

CVE-2026-80808 ext4: stop retrying saturated xattr cache entries

In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without makin...

CVE-2026-80806

CVE-2026-80806 is a flaw in the Linux kernel's ext4 filesystem where newly created encrypted files could incorrectly have the DAX (Direct Access) flag enabled when the filesystem is mounted with -o dax=always. The root cause is a timing issue in __ext4_new_inode(): the call to ext4_set_inode_flag...

EUVD-2026-71241

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

CVE-2026-80806 ext4: don't enable DAX on new encrypted files

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

CVE-2026-80806

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

Linux Distros Unpatched Vulnerability : CVE-2026-80806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in...

cve-2017-7374

cve-2017-7374 脆弱性をトリガーするには、暗号化をサポートするext4ファイルシステムが必要であり、暗号化されたディレクトリを作成する必要があります。...

extundelete

extundelete ext3 または ext4 の削除復元ユーティリティ http://extundelete.sourceforge.net/...

The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the ext4 kernel component in Linux operating systems is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-80528

A flaw was found in the Linux kernel's Ceph filesystem. When the kernel handles replies and fills inode and dentry caches, a memory allocation can trigger a memory reclamation process. This process can incorrectly interpret Ceph-specific data as a journal handle if it interacts with another...

UBUNTU-CVE-2026-80528

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cache from an MDS reply. An allocation in this section can enter direct...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098780 advisory. In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bugon in jbd2journalgetcreateaccess when file system corrupted There's issue when fil...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098809 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4fillsuper Th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098849)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098849 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entrie...

PT-2026-82144

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Ceph component where the handle reply function stores a ceph mds request pointer in the current-journal info variable while populating the inode and dentry cache...