Chromium: CVE-2025-8580 Inappropriate implementation in Filesystems

Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CLSA-2025-1754553172 kernel: Fix of 17 CVEs

net: ch9200: fix uninitialised access during miinwayrestart CVE-2025-38086 - jbd2: fix assertion 'jh-bfrozendata == NULL' failure when journal aborted CVE-2022-50126 - kernfs: fix potential NULL dereference in kernfsremove CVE-2022-50148 - md-raid10: fix KASAN warning CVE-2022-50211 - xhci: Fix...

ext4: inline: fix len overflow in ext4_prepare_inline_data

...

f2fs: fix to do sanity check on sbi->total_valid_block_count

...

jffs2: check that raw node were preallocated before writing summary

...

net: atm: fix /proc/net/atm/lec handling

...

ext4: only dirty folios when data journaling regular files

...

btrfs: handle csum tree error with rescue=ibadroots correctly

...

f2fs: prevent kernel warning due to negative i_nlink from corrupted image

...

atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().

...

DEBIAN-CVE-2025-8580

Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-8580

Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2023-53143

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix another off-by-one fsmap error on 1k block filesystems Apparently syzbot figured out that issuing this FSMAP call: struct fsmaphead cmd = .fmhcount =...

Linux Distros Unpatched Vulnerability : CVE-2019-19815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fsrecoverfsyncdata in fs/f2fs/recovery.c. This is...

Oracle Linux 7 : libblockdev (ELSA-2025-10796)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10796 advisory. - Don't allow suid and dev set on fs resize CVE-2025-6019 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Linux Distros Unpatched Vulnerability : CVE-2024-58095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jfs: add check read-only before txBeginAnon call Added a read-only check before calling txBeginAnon in extAlloc and extRecord. This prevents modification attemp...

Linux Distros Unpatched Vulnerability : CVE-2024-26935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix unremoved procfs host directory regression Commit fc663711b944 scsi: core:...

Linux Distros Unpatched Vulnerability : CVE-2025-38276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/dax: Fix don't skip locked entries when scanning entries Commit 6be3e21d25ca fs/dax: don'...

Linux Distros Unpatched Vulnerability : CVE-2025-37806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in genericfilewriteiter. 1 Before the write operation is completed, the user...

Linux Distros Unpatched Vulnerability : CVE-2025-39688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SCSTATUSFREEABLE when searching via nfs4lookupstateid The pynfs DELEG8 test fail...