kernel: NFS: Fix a race when updating an existing write

A flaw use after free in the Linux kernel NFS functionality was found in the way connected user sends malicious data to the server. A remote user could use this flaw to crash the system...

RHEL 9 : kernel (RHSA-2025:21760)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21760 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ALSA: usb-audio: Validate UAC...

CVE-2025-54771

A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub t...

CVE-2025-34323

Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directories. The 'www-data' user is a member of the 'nagios' group, which has write access to...

kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

A flaw out of boundary read in the Linux kernel NFS functionality was found in the way connected user sends malicious data to the server. A remote user could use this flaw to crash the system...

PT-2026-2535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s Network File System daemon NFSD related to handling Access Control Lists ACLs during NFSv4 file creation. Specifically, when an NFSv4 client attempt...

PT-2025-47332

Name of the Vulnerable Software and Affected Versions baryhuang/mcp-server-aws-resources-python version 0.1.0 Description A code injection issue exists due to insufficient input validation in the execute query method. This allows for remote code execution by exposing dangerous Python built-in...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53173)

NFSv4.0: When two threads are opening files at the same time, and are forced to abort before a reply is seen, then the call to nfsreleaseseqid in nfs4opendatafree can result in a use-after- free of the pointer to the defunct rpc task of the other thread. This plugin only works with Tenable.ot...

kernel: NFS: Fix a race when updating an existing write

A flaw use after free in the Linux kernel NFS functionality was found in the way connected user sends malicious data to the server. A remote user could use this flaw to crash the system...

ROS-20251117-06

A vulnerability in the vfs.c component of the Linux operating system kernel is related to reading outside the allowed boundaries of the of the data buffer. Exploitation of the vulnerability could allow an attacker to impact the integrity of the data integrity...

f2fs: fix null-ptr-deref in f2fs_get_dnode_of_data

...

The vulnerability of the `ocfs2_set inode_data inline()` function in the `fs/ocfs2/alloc.c` module of the OCFS2 file system support module for Linux allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the ocfs2set inodedata inline function in the fs/ocfs2/alloc.c module of the OCFS2 file system support module in Linux relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity and...

The vulnerability of the btrfs_quota_disable() function in the fs/btrfs/qgroup.c module of the file system support module for Linux kernel allows a malicious actor to cause a service failure.

The vulnerability of the btrfsquotadisable function in the fs/btrfs/qgroup.c module of the btrfs file system support module in Linux systems is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the btrfs_put_block_group() function in the fs/btrfs/block-group.c module of the Linux file system support module allows a attacker to cause a service failure.

The vulnerability of the btrfsputblockgroup function in the fs/btrfs/block-group.c module of the btrfs file system support in the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the btrfs_replace_file_extents() function in the fs/btrfs/file.c module of the file system support library for Linux’s kernel allows a attacker to cause a service failure.

The vulnerability of the btrfsreplacefileextents function in the fs/btrfs/file.c module of the file system support for the Linux operating system is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-9982

A vulnerability exists in QuickCMS version 6.8 where sensitive admin credentials are hardcoded in a configuration file and stored in plaintext. This flaw allows attackers with access to the source code or the server file system to retrieve authentication details, potentially leading to privilege...

ext4: verify orphan file size is not too big

...

SUSE CVE-2025-40179

In the Linux kernel, the following vulnerability has been resolved: ext4: verify orphan file size is not too big In principle orphan file can be arbitrarily large. However orphan replay needs to traverse it all and we also pin all its buffers in memory. Thus filesystems with absurdly large orphan...

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to gain elevated privileges.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2025-990924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990924 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed inline inodes i...