SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2111-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2111-1 advisory. The SUSE Linux Enterprise 15 SP1 kernel was updated. The following security bugs were fixed: - CVE-2022-21127: Fixed a stale MMIO...

PT-2022-37979

Уязвимость функции ext4 mb normalize request модуля fs/ext4/mballoc.c поддержки файловой системы Ext4 ядра операционной системы Linux связана с распределением ресурсов без ограничений и регулирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-8640

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A NULL pointer issue has been identified in the Linux kernel when resizing a corrupt ext4 image with the resize inode feature disabled. This issue can be reproduced by creating an ex...

PT-2025-8641

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug has been identified in the Linux kernel, specifically in the ext4 file system. The issue occurs when the ext4 mb use inode pa function is called, leading to a BUG ON error at...

SUSE: Security Advisory (SUSE-SU-2022:2078-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-6588

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged loca...

LEAF - Linux Evidence Acquisition Framework

Linux Evidence Acquisition Framework LEAF acquires artifacts and evidence from Linux EXT4 systems, accepting user input to customize the functionality of the tool for easier scalability. Offering several modules and parameters as input, LEAF is able to use smart analysis to extract Linux artifact...

PT-2025-8282

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the ext4 file system. The issue arises from the misuse of the EXT4 FC REPLAY bit in the superblock field s state, whic...

PT-2025-8281

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc2-next-20220413+ 155 Description A bug in the Linux kernel has been resolved, specifically in the ext4 file system. The issue occurs when writing inline data to an inode, which can lead to an inconsisten...

PT-2025-8343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel's ext4 file system has been identified, which can cause a system panic due to an incorrect check for overlapping extents. The issue occurs when the ext4 valid...

PT-2025-8283

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.0+ Description A use-after-free issue has been identified in the ext4 rename dir prepare function of the Linux kernel. This issue arises when the first directory entry's 'rec len' is 34478, resulting in an...

PT-2025-8286

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the issue described. Description The issue arises when there is an attempt to set an inode's size to a value larger than its current size, but the ext4 mark inode dirty...

kernel: race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem

A flaw was found in the Linux kernel. A race condition was discovered in the ext4 subsystem. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

kernel: information leak in copy_page_to_iter() in iov_iter.c

An information leak flaw was found via ext4extentheader in fs/ext4/extents.c in the Linux kernel. This flaw could allow a local attacker to cause a denial of service...

kernel: information leak in copy_page_to_iter() in iov_iter.c

An information leak flaw was found via ext4extentheader in fs/ext4/extents.c in the Linux kernel. This flaw could allow a local attacker to cause a denial of service...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-005)

The version of kernel installed on the remote host is prior to 5.10.62-55.141. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-005 advisory. A flaw was found in the Linux kernel's implementation of wireless drivers using the Atheros chipsets. An...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-007)

The version of kernel installed on the remote host is prior to 5.4.144-69.257. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-007 advisory. A race problem was seen in the vtkioctl in drivers/tty/vt/vtioctl.c in the Linux kernel, which may cause an...

CLSA-2022-1651146021 Fix of CVE: CVE-2022-0617, CVE-2021-40490, CVE-2021-29154, CVE-2022-0435, CVE-2021-4154, CVE-2021-3753, CVE-2021-38160, CVE-2021-45485, CVE-2021-3752, CVE-2021-41864, CVE-2021-4083, CVE-2021-26930

udf: Restore ilenAlloc when inode expansion fails Jan Kara CVE-2022-0617 - udf: Fix NULL ptr deref when converting from inline format Jan Kara CVE-2022-0617 - Bluetooth: fix use-after-free error in locksocknested Wang ShaoBo CVE-2021-3752 - vtkdsetmode: extend console locking Linus Torvalds...

CVE-2022-28195

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4readfile function, where insufficient validation of untrusted data may allow a highly privileged local attacker to cause a integer overflow, which may lead to code execution, escalation of privileges, limited denial of...

CVE-2022-28195

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4readfile function, where insufficient validation of untrusted data may allow a highly privileged local attacker to cause a integer overflow, which may lead to code execution, escalation of privileges, limited denial of...