Linux Distros Unpatched Vulnerability : CVE-2025-68168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jfs: fix uninitialized waitqueue in transaction manager The transaction manager initialization in txInit was not properly initializing TxBlock0.waitor waitqueue...

USN-7934-1 linux-azure, linux-azure-6.14 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux...

USN-7909-5 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...

USN-7933-1 linux-kvm vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7930-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBand drivers; - MTD block device drivers;...

USN-7930-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBand drivers; - MTD block device drivers;...

USN-7930-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBand drivers; - MTD block device drivers;...

SGWBox N3 授权问题漏洞

SGWBox N3 is a network storage device from China's Pickup Dock SGWBox. An authorization issue vulnerability exists in SGWBox N3 version 2.0.25, which stems from incorrect manipulation of the parameter token in the file/fsnotify, which could lead to improper authentication...

The vulnerability of the Solaris operating system’s file system, which allows a perpetrator to trigger a service failure

The vulnerability of the Solaris operating system’s file system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fs/smb component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the fs/smb component in Linux operating systems is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the NFS kernel component in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the NFS component in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the erofs_fc_fill_super() function in the fs/erofs/super.c module of the EROFS Enhanced Read-Only File System library in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the erofsfcfillsuper function in the fs/erofs/super.c module of the EROFS file system support for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the fs/nfsd/nfs4state.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/nfsd/nfs4state.c component in the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the fs/f2fs component in Linux kernel allows a hacker to trigger a system failure.

The vulnerability of the fs/f2fs component in Linux operating systems is related to buffer overflows in the stack. Exploiting this vulnerability allows an attacker to cause a system failure...

The vulnerability of the nfs_open_local_fh() function in the fs/nfs_common/nfslocalio.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfsopenlocalfh function in the fs/nfscommon/nfslocalio.c module of the Linux kernel is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the xfs component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the xfs component in Linux operating systems is related to a lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability of the nfs_fh_to_dentry() function in the fs/nfs/export.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfsfhtodentry function in the fs/nfs/export.c component of the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause service failures...

ROS-20251215-7313

A vulnerability in the cifs.upcall function of the CIFS cifs-utils network file system mount utility package is related to the provisioning of a data element for an erroneous session. Exploitation of the vulnerability could allow an attacker to disclose protected information...

The vulnerability of the fs/jfs component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fs/jfs component in Linux operating systems is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the fs/nfs component in Linux operating systems allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fs/nfs component in Linux operating systems is related to the improper assignment of privileges. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...