GSD-2022-1001906 ext4: make mb_optimize_scan performance mount option work with extents

ext4: make mboptimizescan performance mount option work with extents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem.

...

CVE-2021-4149

A vulnerability was found in btrfsalloctreeb in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service DOS due to a deadlock problem...

DEBIAN-CVE-2021-4149

A vulnerability was found in btrfsalloctreeb in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service DOS due to a deadlock problem...

UBUNTU-CVE-2021-4149

A vulnerability was found in btrfsalloctreeb in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service DOS due to a deadlock problem...

CVE-2021-4149

A vulnerability was found in btrfsalloctreeb in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service DOS due to a deadlock problem...

GSD-2022-1000723 btrfs: defrag: allow defrag_one_cluster() to skip large extent which is not a target

btrfs: defrag: allow defragonecluster to skip large extent which is not a target This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by...

CVE-2022-0850

An information leak flaw was found via ext4extentheader in fs/ext4/extents.c in the Linux kernel. This flaw could allow a local attacker to cause a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options dont meet the Red Hat Product...

PT-2022-7615 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17-rc3 Description: The vulnerability is related to the btrfs component of the Linux kernel and is associated with incorrect locking. When operating on a non-uptodate page, the assert eb page uptodate function...

A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.

...

PT-2021-7231 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the btrfs alloc tree b function in the Linux kernel's btrfs file system, specifically in fs/btrfs/extent-tree.c, is due to an improper lock operation. This issue can cause a...

Tuxera NTFS-3G null pointer dereference vulnerability

NTFS-3G is a stable, full-featured, read/write NTFS driver for Linux, Android, Mac OS X, FreeBSD, NetBSD, OpenSolaris, QNX, Haiku, and other operating systems. ntfs extentinodeopen is vulnerable to a null pointer dereference. An attacker could exploit the vulnerability to cause null pointer...

DEBIAN-CVE-2021-39251

A crafted NTFS image can cause a NULL pointer dereference in ntfsextentinodeopen in NTFS-3G 2021.8.22...

UBUNTU-CVE-2021-39251

A crafted NTFS image can cause a NULL pointer dereference in ntfsextentinodeopen in NTFS-3G 2021.8.22...

CVE-2021-39251

A crafted NTFS image can cause a NULL pointer dereference in ntfsextentinodeopen in NTFS-3G 2021.8.22...

PT-2021-5753 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: The issue is related to a NULL pointer dereference in the ntfs extent inode open function of the NTFS-3G driver for the FUSE module. This can be exploited by a crafted NTFS image, potentially...

GSD-2021-1001175 btrfs: fix lock inversion problem when doing qgroup extent tracing

btrfs: fix lock inversion problem when doing qgroup extent tracing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2021-2221)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

The vulnerability of the SubstituteString() function in the MagickCore/string.c component of the ImageMagick console graphics editor allows a malicious actor to cause a service failure by exploiting integer overflow.

The vulnerability of the SubstituteString function in the MagickCore/string.c component of the ImageMagick console graphics editor is related to the lack of checking for the replaceextent parameter when it takes a zero value. Exploiting this vulnerability allows an attacker to cause a service...

UVI-2021-1000731 ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed

ext4: fix bug on in ext4escacheextent as ext4splitextentat failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.236 by commit...