1986 matches found
CVE-2025-57849 Fuse: privilege escalation via excessive /etc/passwd permissions
A container privilege escalation flaw was found in certain Fuse images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, ca...
CVE-2025-57849
A container privilege escalation flaw was found in certain Fuse images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, ca...
PT-2026-25150
A container privilege escalation flaw was found in certain Fuse images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, ca...
Red Hat Fuse 安全漏洞
Red Hat Fuse is an open-source distributed integration platform based on Apache Camel, developed by Red Hat Inc. This platform provides standardized methods, infrastructure, and tools for integrating services, microservices, and application components. Red Hat Fuse has a security vulnerability th...
EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1280)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : nvme: nvme-fc: Ensure -ioerrwork is cancelled in nvmefcdeletectrlCVE-2025-40261 cifs: fix session state check in reconnect to avoid use-after-free...
The vulnerability of the fs/fuse component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the fs/fuse component in Linux operating systems is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...
EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1244)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : nvme: nvme-fc: Ensure -ioerrwork is cancelled in nvmefcdeletectrlCVE-2025-40261 cifs: fix session state check in reconnect to avoid use-after-free...
NewStart CGSL MAIN 6.06 (SP) : fuse Multiple Vulnerabilities (NS-SA-2026-0006)
The remote NewStart CGSL host, running version MAIN 6.06 SP, has fuse packages installed that are affected by multiple vulnerabilities: - fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005546)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005546 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fusenotifystore, unlike...
container-tools:ol8 security update
aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-2 - rebuild for CVE-2025-61729 - Resolves: RHEL-140529 cockpit-podman 84.1-1 - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 - Related: Jira:RHEL-25557 conmon...
Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50112)
The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50112 advisory. - tls: Use skdstget and dstdevrcu in getnetdevforsock. Kuniyuki Iwashima Orabug: 38649136 CVE-2025-40149 - fuse: fix runtime warning on...
Unbreakable Enterprise kernel security update
6.12.0-108.64.6.3 - net/rds: Fix issue with a revert in rdssendqueuerm Sharath Srinivasan Orabug: 38937451 6.12.0-108.64.6.2 - Revert 'net/rds: fix crash by expanding kref coverage to rdsincoming.iconn' Sharath Srinivasan Orabug: 38937451 - Revert 'net/rds: expand kref coverage to...
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50113)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50113 advisory. - sunrpc: fix client side handling of tls alerts Olga Kornievskaia Orabug: 38334981 CVE-2025-38571 - sunrpc: fix handling of server side tls alert...
UBUNTU-CVE-2026-23168
In the Linux kernel, the following vulnerability has been resolved: flexproportions: make fpropnewperiod hardirq safe Bernd has reported a lockdep splat from flexible proportions code that is essentially complaining about the following race: runtimersoftirq - we are in softirq context calltimerfn...
GHSA-W4GW-W5JQ-G9JH vulnerabilities
Vulnerabilities for packages: k8s-device-plugin, wuzz, fuse-overlayfs-snapshotter, k3s, runc, aws-load-balancer-controller, gitness...
GHSA-W4GW-W5JQ-G9JH vulnerabilities
Vulnerabilities for packages: cilium-envoy-fips, wuzz, fuse-overlayfs-snapshotter, etcd, localstack, k8s-device-plugin, gitness, gendesk, rke2-runtime-fips, rke2-runtime, gitlab-rails-ce, runc, terraform, etcd-fips, k3s, nvidia-gpu-operator-validator, aws-load-balancer-controller,...
CVE-2025-58190 vulnerabilities
Vulnerabilities for packages: cilium-envoy-fips, wuzz, fuse-overlayfs-snapshotter, etcd, localstack, k8s-device-plugin, gitness, gendesk, rke2-runtime-fips, rke2-runtime, gitlab-rails-ce, runc, terraform, etcd-fips, k3s, nvidia-gpu-operator-validator, aws-load-balancer-controller,...
CVE-2025-47911 vulnerabilities
Vulnerabilities for packages: cilium-envoy-fips, wuzz, fuse-overlayfs-snapshotter, etcd, localstack, k8s-device-plugin, gitness, gendesk, rke2-runtime-fips, rke2-runtime, gitlab-rails-ce, runc, terraform, etcd-fips, k3s, nvidia-gpu-operator-validator, aws-load-balancer-controller,...