PT-2021-24807

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.20 through 5.10.37 Description: The issue is related to the f2fs filesystem in the Linux Kernel, where a problem in the get victim function could potentially lead to security vulnerabilities. The actual impact and atta...

PT-2021-28662

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.12.4 Description A race condition exists between overwrite and truncate operations in the f2fs compress functionality. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-28683

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description The issue is related to the f2fs file system, specifically in the get victim function, where it may touch checkpointed data. The actual impact and attack plausibility have not yet been proven...

PT-2021-28687

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.12.4 Description A potential issue in the f2fs file system may cause a panic during the f2fs resize fs function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-28802

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.38 Description A potential issue exists in the f2fs file system, which could lead to a panic during the f2fs resize fs function call. The actual impact and attack plausibility have not yet been proven...

PT-2021-28781

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.10.37 Description A race condition exists between overwrite and truncate operations in the f2fs compress functionality. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2021-28801

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.10.37 Description The issue is related to the f2fs file system, specifically in the get victim function, where it may touch checkpointed data. The actual impact and attack plausibility have not yet been...

PT-2021-24668

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.12.4 Description A race condition exists between overwrite and truncate operations in the f2fs compress functionality. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-24693

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.12.4 Description A potential issue exists in the f2fs resize fs function, which may cause a panic. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-24689

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.20 through v5.12.4 Description The issue is related to the f2fs file system, specifically in the get victim function, where it may touch checkpointed data. This could potentially lead to security vulnerabilities,...

PT-2021-24787

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.10.37 Description A race condition exists between overwrite and truncate operations in the f2fs compress functionality. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2021-24808

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.38 Description: A potential issue exists in the f2fs file system, which could lead to a panic during the f2fs resize fs function call. The actual impact and attack plausibility have not yet been proven...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.37 and fixes at least the following security issues: It was discovered that the iouring implementation of the Linux kernel did not properly enforce the MAXRWCOUNT limit in some situations. A local attacker could use this to cause a denial of...

Arbitrary Code Execution

f2fs-tools is vulnerable to arbitrary code execution. An exploitable code execution vulnerability exists in the fsckchkorphannode functionality allows an attacker to execute arbitrary code on the host OS via heap-based buffer overflow using a malicious f2fs file...

Remote Code Execution (RCE)

f2fs-tools, edge is vulnerable to remote code execution. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability...

Information Disclosure

f2fs-tools is vulnerable to information disclosure. An exploitable information disclosure vulnerability exists in the initnodemanager functionality. An attacker is able to obtain confidential information via a malicious file...

An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

...

Linux kernel out-of-bounds memory access vulnerability

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An out-of-bounds memory access vulnerability exists in fs/f2fs/node.c in the f2fs module in versions of Linux kernel...

CVE-2021-3506

An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The...

CVE-2021-3506

An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The...