Lucene search
+L

6212 matches found

RedHat Linux
RedHat Linux
•added 2023/11/14 3:24 p.m.•14 views

kernel: ext4: use-after-free in ext4_xattr_set_entry()

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw allows a privileged local user to cause a system crash or other undefined behaviors...

6.7CVSS6.6AI score0.00242EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2023/11/14 3:24 p.m.•17 views

kernel: ovl: fix use after free in struct ovl_aio_req

A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations simultaneously with the overlay FS usage. This flaw allows a local user to crash or potentially escalate their privileges on the system. Only if patch 9a2544037600 "ovl: fix use...

7.8CVSS6.6AI score0.00223EPSS
SaveExploits0References5
osv_alsa
osv_alsa
•added 2023/11/14 12:00 a.m.•107 views

ALSA-2023:7077 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tun: avoid double free in tunfreenetdev CVE-2022-4744 kernel: net/sched: multiple vulnerabilities CVE-2023-3609, CVE-2023-3611, CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208...

8.8CVSS6.7AI score0.03124EPSS
SaveExploits9References105
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•14 views

kernel: ext4: fix possible double unlock when moving a directory

In the Linux kernel, the following vulnerability has been resolved: ext4: fix possible double unlock when moving a directory...

7.8CVSS6.4AI score0.00215EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•13 views

kernel: ext4: fix WARNING in ext4_update_inline_data

In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in ext4updateinlinedata Syzbot found the following issue: EXT4-fs loop0: mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. fscrypt: AES-256-CTS-CBC using implementation...

7.8CVSS6.1AI score0.00214EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•25 views

kernel: ext4: Fix function prototype mismatch for ext4_feat_ktype

In the Linux kernel, the following vulnerability has been resolved: ext4: Fix function prototype mismatch for ext4featktype With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to make sure the call...

5.5CVSS6AI score0.0016EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•12 views

kernel: ext4: fix task hung in ext4_xattr_delete_inode

In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4xattrdeleteinode Syzbot reported a hung task problem: ================================================================== INFO: task syz-executor232:5073 blocked for more than 143 seconds. Not tainted...

5.5CVSS6AI score0.00204EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/11/07 12:00 a.m.•18 views

PT-2025-18893 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A deadlock issue during directory rename operations has been identified. The problem arises from incorrect lock ordering, where i rwsem is locked while transactions are started, contra...

8.2CVSS6.4AI score0.16525EPSS
SaveExploits6References275
RedhatCVE
RedhatCVE
•added 2023/10/23 10:00 p.m.•26 views

CVE-2023-45898

A use-after-free flaw was found in the EXT4 file system, related to ext4esinsertextent, in the Linux Kernel. This issue may allow an attacker to create a crafted EXT4 file system which will trigger the vulnerability and lead the kernel to PANIC, causing a denial of service on the targeted system...

7.8CVSS6.5AI score0.00293EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/10/23 12:00 a.m.•3 views

PT-2024-14663

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc5+ Description The vulnerability is related to the ext4 file system in the Linux kernel. When an ext4 file system is online resized with an oversized flexbg size, it can trigger a WARN ON due to the size ...

7.8CVSS5.9AI score0.00243EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2023/10/20 7:00 a.m.•20 views

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c related to ext4_es_insert_extent.

...

7.8CVSS7AI score0.00293EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/10/17 12:59 a.m.•12 views

SUSE CVE-2023-45898

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extentsstatus.c, related to ext4esinsertextent...

7.8CVSS7.5AI score0.00293EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2023/10/16 3:15 a.m.•18 views

AZL-31566 CVE-2023-45898 affecting package kernel for versions less than 5.15.135.1-2

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extentsstatus.c, related to ext4esinsertextent...

7.8CVSS7.1AI score0.00293EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/16 3:15 a.m.•30 views

CVE-2023-45898

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extentsstatus.c, related to ext4esinsertextent...

7.8CVSS7AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2023/10/16 3:15 a.m.•13 views

CVE-2023-45898

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extentsstatus.c, related to ext4esinsertextent...

7.8CVSS5.8AI score0.00293EPSS
SaveExploits0References7
osv_debian
osv_debian
•added 2023/10/16 3:15 a.m.•9 views

DEBIAN-CVE-2023-45898

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extentsstatus.c, related to ext4esinsertextent...

7.8CVSS7.5AI score0.00293EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/16 3:15 a.m.•25 views

CVE-2023-45898

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extentsstatus.c, related to ext4esinsertextent...

7.8CVSS7.4AI score0.00293EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu
•added 2023/10/16 3:15 a.m.•15 views

UBUNTU-CVE-2023-45898

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extentsstatus.c, related to ext4esinsertextent...

7.8CVSS7.1AI score0.00293EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
•added 2023/10/16 3:15 a.m.•44 views

CVE-2023-45898

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extentsstatus.c, related to ext4esinsertextent...

7.8CVSS6.8AI score0.00293EPSS
SaveExploits0References12
Prion
Prion
•added 2023/10/16 3:15 a.m.•33 views

Design/Logic Flaw

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extentsstatus.c, related to ext4esinsertextent...

4.3CVSS7.4AI score0.00293EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder