CVE-2026-64705

CVE-2026-64705 — HFS xattr kernel heap overflow macOS Root-cause analysis and proof-of-concept for CVE-2026-64705, a buffer overflow in the HFS kernel extension fixed in macOS Sonoma 14.8.7 HT127117: HFS — Impact: An app may be able to cause unexpected system termination or write kernel memory. A...

CVE-2026-111159

A flaw was found in libewf. An attacker could exploit this vulnerability by convincing a user to process a specially crafted file with oversized extended attribute metadata. Due to improper size validation, the library performs an out-of-bounds memory read, which can cause the application to cras...

CVE-2026-89779

A flaw was found in the Linux kernel's ntfs3 filesystem driver. This vulnerability allows a local attacker to craft an Extended Attribute EA record with an undersized ef-size value. When processed, this can lead to an out-of-bounds read, resulting in the disclosure of sensitive heap memory to...

CVE-2026-111159

The libewf library (versions through 20260924 ) is vulnerable to a heap out-of-bounds read in the libewf_lef_extended_attribute_read_data() function. The root cause is that UTF-16 name and value sizes are validated before being doubled. An attacker can provide a crafted .L01/.Lx01 file with overs...

CVE-2026-111159 libewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsing

libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewflefextendedattributereaddata because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application or lea...

CVE-2026-111159 libewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsing

libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewflefextendedattributereaddata because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application or lea...

Astra Linux – Vulnerability in Linux 5.15

A issue was discovered in the Linux kernel before version 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, resulting in an out-of-bounds read in the ntfssetea function in fs/ntfs3/xattr.c...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: refuses to create an EA block when umounted. The EA block expansion needs to access sroot, but sroot is already set to NULL when umount is triggered. This request is refused to avoid panic conditions...

Rocky Linux 8 [CIQ] Security Update: rsync / rsync-daemon / rsync-debuginfo / rsync-debugsource (crlsa-2026_17481)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202617481 advisory. rsync: Rsync: Use-after-free vulnerability in extended attribute handling CVE-2026-41035 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 10.2 [CIQ] Security Update: rsync / rsync-daemon / rsync-debuginfo / rsync-debugsource / etc (crlsa-2026_19152)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619152 advisory. rsync: Rsync: Use-after-free vulnerability in extended attribute handling CVE-2026-41035 Tenable has extracted the preceding description block directly from the...

CVE-2026-98133

A flaw was found in the Linux kernel's NTFS file system implementation. When an error occurs while setting an extended attribute EA, the kernel prematurely clears the flag indicating that extended attributes are present. A local user can exploit this vulnerability by triggering a failed extended...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed an out-of-band issue in ntfslistxattr. The length of a name cannot exceed the space occupied by “ea”...

Exploit for Classic Buffer Overflow in Apple Macos

CVE-2026-64705 — HFS xattr kernel heap overflow macOS Root-...

AZL-99903 CVE-2026-71222 affecting package gfs2-utils 3.5.1-1

A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesystem...

UBUNTU-CVE-2026-71222

A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesystem...

CVE-2026-71222 Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing

A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesystem...

PT-2026-85019

Name of the Vulnerable Software and Affected Versions gfs2-utils affected versions not specified Description A heap out-of-bounds read occurs when the ea num ptrs field from on-disk extended attribute metadata is processed without proper bounds validation. This can lead to a heap buffer over-read...

CVE-2026-64392

A flaw was found in the ksmbd component of the Linux kernel. This vulnerability allows an attacker to bypass filesystem permission checks during 'delete-on-close' operations. Specifically, when a file handle is torn down, the base-file unlink and extended attribute xattr removal operations...

USN-8455-1: Netatalk vulnerabilities

Arjun Basnet discovered that Netatalk improperly validated inputs when unmarshalling Spotlight Remote Procedure Call. A remote authenticated attacker could possibly use this issue to cause a denial of service or obtain sensitive information. CVE-2026-44066 Arjun Basnet discovered that Netatalk...

Important: Red Hat Security Advisory: rsync security update

An update for rsync is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...