CVE-2025-6019-Exploitation

CVE-2025-6019 – UDisks2 ResizeFilesystem 漏洞（教育性复现） 本仓库记录了在受控实验室环境（Ubuntu 虚拟机，非生产环境）中对 CVE-2025-6019 的教育性复现。 🛡️ 安全公告 本研究在沙盒化的 Ubuntu 环境中复现了 CVE-2025-6019，以分析 UDisks2 漏洞的根本原因和缓解措施。 所有结果均负责任地分享，旨在提升安全意识并推动补丁应用。 如果您是供应商或维护者，请确保您的系统已安装最新的安全更新。 简介 该 CVE 漏洞是 Linux 系统中的一种本地权限提升漏洞，源于 Linux 文件系统管理组件（此处指...

UBUNTU-CVE-2026-88832

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images...

CVE-2026-88832 Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images...

CVE-2026-88832

BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images...

CVE-2026-88832

The BusyBox utility is vulnerable to a heap buffer overflow during romfs volume ID parsing . The root cause is the use of an unbounded strlen on attacker-controlled metadata, which leads to an unbounded memcpy into a fixed-size label buffer when processing crafted filesystem images. Practical con...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clamav (UTSA-2023-002120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002120 advisory. A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of...

DEBIAN-CVE-2026-90133

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...

CVE-2026-90133

CVE-2026-90133 is a heap out-of-bounds write in the Linux kernel's NTFS filesystem driver , specifically in the ntfs_ir_to_ib() function. The function copies entries from an index_root structure into a fixed-size buffer (index_block_size bytes) via memcpy without verifying that the entries fit wi...

CVE-2026-90133 ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...

EUVD-2026-81726

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...

CVE-2026-90133 ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...

CVE-2026-90419: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent out-of-bounds read in super root block parsing super-root inode metadata size is trusted before nilfsreadinodecommon. Reject super-root inode sizes whose computed on-disk footprint exceeds the filesystem block siz...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: removing WARNON from hfspluscatread,writeinode. The syzbot tool encounters WARNON in hfspluscatread,writeinode, where a crafted filesystem image may contain invalid lengths. These conditions do not constitute kernel...

CVE-2026-71220 Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...

CVE-2026-13215 Zephyr ext2 mount: unvalidated superblock block size causes out-of-bounds write from a crafted filesystem image

The Zephyr ext2 filesystem driver fails to validate the slogblocksize field of the on-disk superblock when mounting a filesystem. ext2verifydisksuperblock in subsys/fs/ext2/ext2impl.c checks the magic number, revision, inode size and group counts, but never bounds slogblocksize. On a successful...

SUSE CVE-2026-72191

In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indxinsertintobuffer indxinsertintobuffer computes used = used1 - tocopy - spsize; memmovedet, Add2Ptrsp, spsize, used - le32tocpuhdr1-deoff; where sp and spsize come from hdrfindsplit...

EUVD-2026-63754

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege...

CVE-2026-19783

CVE-2026-19783 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker with a crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads due to insufficient validation , causing kernel memory corruption. The impact ranges from a system crash (deni...

CVE-2026-19783 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege...

CVE-2026-19783: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege...