Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a potential deadlock issue in f2fs, which could lead to a deadlock...

MiracleLinux 9 : kernel-5.14.0-503.19.1.el9_5 (AXSA:2025-9562:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9562:06 advisory. kernel: Bluetooth: l2cap: fix null-ptr-deref in l2capchantimeout CVE-2024-27399 kernel: bpf: Add BPFPROGTYPECGROUPSKB attach type enforcement in...

MiracleLinux 8 : kernel-4.18.0-553.78.1.el8_10 (AXSA:2025-10963:77)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10963:77 advisory. kernel: smb: client: fix use-after-free in cifsoplockbreak CVE-2025-38527 kernel: NFS: Fix filehandle bounds checking in nfsfhtodentry CVE-2025-397...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a clnextfreerec field in ocfs2findvictimchain that is 0 or greater than clcount, which could cause the kerne...

Microsoft Windows NTFS 安全漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-healing and logging capabilities. A code execution vulnerability exists in Microsoft Windows NTFS, which can be exploited by an attacker to execute arbitrary code on...

PT-2026-2378

Name of the Vulnerable Software and Affected Versions Wondershare FamiSafe version 1.0 Description The software contains an unquoted service path issue within the FSService component. This could allow local users to potentially execute code with elevated privileges. The issue stems from an unquot...

CVE-2026-20820: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-21272: Improper Input Validation

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requir...

ROS-20260113-7321

A vulnerability in the f2fssetattr function of the fs/f2fs/file.c module of the Linux kernel's F2FS file system support is related to improper control of resource identifiers "resource injection". Exploitation of the vulnerability may allow a remote intruder to affect the integrity of protected...

ROS-20260113-7313

A vulnerability in the loadelfbinary function of the Linux kernel file system is related to incorrect input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2025-68771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix kernel BUG in ocfs2findvictimchain syzbot reported a kernel BUG in ocfs2findvictimchain because the clnextfreerec field of the allocation chain list...

USN-7922-5 linux-iot vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - InfiniBand drivers; - Media drivers; - Network drivers; - Pin controllers...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

ROS-20260112-7338

A vulnerability in the btrfsputblockgroup function of the fs/btrfs/block-group.c module of the Linux operating system kernel's btrfs file system support is related to a lack of memory release after an effective lifetime. Exploitation of the vulnerability could allow an attacker to cause a denial ...

ROS-20260112-7366

A vulnerability in the f2fs component of the Linux operating system kernel involves improper error handling. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260112-7379

A vulnerability in the dbDiscardAG function of the JFS file system of the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260112-7306

A vulnerability in the gfs2putsuper function in the fs/gfs2/super.c module of the gfs2 file system of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected...

ROS-20260112-7380

A vulnerability in the dtInsert function of the JFS file system of the Linux kernel is related to pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260112-7351

A vulnerability in the nfs4setsecuritylabel function of the fs/nfs/nfs4proc.c module of the Linux operating system kernel is related to improper memory release before deleting the last link "memory leak". Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260112-7331

A vulnerability in the ext4xattrsetentry function of the fs/ext4/xattr.c module of the Ext4 file system of the Linux kernel is related to insufficient locking of a resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...