UBUNTU-CVE-2022-50705

In the Linux kernel, the following vulnerability has been resolved: iouring/rw: defer fsnotify calls to task context We can't call these off the kiocb completion as that might be off soft/hard irq context. Defer the calls to when we process the taskwork for this request. That avoids valid...

UBUNTU-CVE-2025-68361

In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...

CVE-2025-68364

In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG to ocfs2error in ocfs2moveextent In 'ocfs2moveextent', relax 'BUG' to 'ocfs2error' just to avoid crashing the whole kernel due to a filesystem corruption...

CVE-2023-54002 btrfs: fix assertion of exclop condition when starting balance

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion of exclop condition when starting balance Balance as exclusive state is compatible with paused balance and device add, which makes some things more complicated. The assertion of valid states when starting fro...

CVE-2023-53988

Summary (CVE-2023-53988): The Linux kernel ntfs3 driver fixes a slab-out-of-bounds read in hdr_delete_de(). The bug is triggered when processing the INDEX_HDR in fs/ntfs3, where the index header validity check was missing, allowing potential out-of-bounds access if the metadata is corrupted or ma...

CVE-2025-68364

The CVE refers to a Linux kernel issue in the OCFS2 filesystem: in __ocfs2_move_extent(), a BUG() was relaxed to ocfs2_error() to avoid crashing the entire kernel due to filesystem corruption. This indicates the root cause was a kernel-crashing error path in ocfs2_move_extent() that could exacerb...

CVE-2025-68364 ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG to ocfs2error in ocfs2moveextent In 'ocfs2moveextent', relax 'BUG' to 'ocfs2error' just to avoid crashing the whole kernel due to a filesystem corruption...

CVE-2025-68364

In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG to ocfs2error in ocfs2moveextent In 'ocfs2moveextent', relax 'BUG' to 'ocfs2error' just to avoid crashing the whole kernel due to a filesystem corruption...

CVE-2025-68364 ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG to ocfs2error in ocfs2moveextent In 'ocfs2moveextent', relax 'BUG' to 'ocfs2error' just to avoid crashing the whole kernel due to a filesystem corruption...

CVE-2025-68361 erofs: limit the level of fs stacking for file-backed mounts

In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...

CVE-2025-68361

CVE-2025-68361 relates to the Linux kernel's EROFS file system. The issue is addressed by a patch that limits the level of file-backed filesystem stacking, mitigating a potential kernel stack overflow (for example, when EROFS mounts itself). The connected documents consistently describe the fix i...

CVE-2025-68361 erofs: limit the level of fs stacking for file-backed mounts

In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...

CVE-2025-68356 gfs2: Prevent recursive memory reclaim

In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function newinode returns a new inode with inode-imapping-gfpmask set to GFPHIGHUSERMOVABLE. This value includes the GFPFS flag, so allocations in that address space can recurse into...

CVE-2025-68356 gfs2: Prevent recursive memory reclaim

In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function newinode returns a new inode with inode-imapping-gfpmask set to GFPHIGHUSERMOVABLE. This value includes the GFPFS flag, so allocations in that address space can recurse into...

CVE-2025-68356

CVE-2025-68356 describes a Linux kernel issue in gfs2 where new_inode() could set inode address space GFP masks to GFP_HIGHUSER_MOVABLE, potentially including __GFP_FS and allowing memory reclaim to recurse into filesystem code, risking stack usage and deadlocks. The fix is to remove __GFP_FS fro...

PT-2025-53176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to filesystem remounting. Specifically, the code responsible for reconfiguring or remounting filesystems does not adequately protect against...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unrestricted number of filesystem stack layers, which could lead to a kernel stack overflow...

PT-2025-53059

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained an incorrect exception table annotation within the clear user rep good function. This issue stemmed from the annotation pointing to a register move instead of...

PT-2025-52980

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to a race condition between the btrfs balance operation and cancel/pause requests. A reproducer involving running a balance and a cancel or pause...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a lack of checking when gvt debugs filesystem destruction, which could lead to null pointer dereferencing...