24635 matches found
CVE-2025-38701
CVE-2025-38701 relates to ext4 in the Linux kernel where a syzbot-triggered BUG_ON could occur when INLINE_DATA_FL is set but the system.data xattr is missing. The fix replaces BUG_ON with EXT4_ERROR_INODE() in ext4_create_inline_data() and ext4_inline_data_truncate(), and documents reporting a c...
CVE-2025-38701 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINEDATAFL lacks system.data xattr A syzbot fuzzed image triggered a BUGON in ext4updateinlinedata when an inode had the INLINEDATAFL flag set but was missing the system.data extended attribute. Since this...
CVE-2025-38698
Summary: CVE-2025-38698 affects the Linux kernel JFS file system. A vulnerability allows regular file operations to fail or corrupt due to a corrupted on-disk file created with a negative i_size. The fix adds a check when opening such files to prevent subsequent operation failures, addressing pot...
CVE-2025-38697 jfs: upper bound check of tree index in dbAllocAG
In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadat...
CVE-2025-38697
The CVE relates to the Linux kernel JFS: an upper bound check in dbAllocAG when computing the tree index could go out of bounds if filesystem metadata is corrupted. This could enable a local attacker to trigger out-of-bounds conditions in JFS data structures. The vulnerability is resolved in the ...
CVE-2025-38692 exfat: add cluster chain loop check for dir
In the Linux kernel, the following vulnerability has been resolved: exfat: add cluster chain loop check for dir An infinite loop may occur if the following conditions occur due to file system corruption. 1 Condition for exfatcountdirentries to loop infinitely. - The cluster chain includes a loop....
Grub2: fs/bfs: integer overflow in the bfs parser.
...
Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write
...
Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser
...
Grub2: fs/tar: integer overflow causes heap oob write
...
btrfs: adjust subpage bit start based on sectorsize
...
Grub2: fs/hfs+: refcount can be decremented twice
...
fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
...
nilfs2: reject invalid file types when reading inodes
...
btrfs: fix iteration of extrefs during log replay
...
f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
...
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.
...
HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow
...
fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
...
A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner and permissions of a file.
...