CVE-2023-20052

CVE-2023-20052 익스플로잇 - 수정된 빌드 실제로 컴파일되는 CVE-2023-20052 ClamAV XXE 취약점에 대한 수정된 Docker 빌드 무엇이 깨졌나 원본 익스플로잇이 최신 시스템에서 빌드되지 않음: ❌ OpenSSL 3.0 호환성 오류 ❌ HMACCTX 구조체 불완전 타입 오류 ❌ 암시적 함수 선언 오류 ❌ dmg/filevault.c 컴파일에서 빌드 실패 내가 수정한 것 1. 기본 이미지 변경 : Ubuntu 22.04 → Ubuntu 18.04 2. OpenSSL 버전 수정 : libssl1.0-de...

ROS-20260923-73-0047

The vulnerability of the hfsplusstrcasecmp function in the fs/hfsplus/unicode.c component of the Linux kernel involves reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-93095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hfsplus: validate thread record before delete key rebuild hfsplusdeletecat is called with str == NULL when the last open reference to an unlinked HFS+ hardlink...

AZL-102660 CVE-2026-93095 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: hfsplus: validate thread record before delete key rebuild hfsplusdeletecat is called with str == NULL when the last open reference to an unlinked HFS+ hardlink backing inode is closed. In that case, the function finds the catalog...

DEBIAN-CVE-2026-93095

In the Linux kernel, the following vulnerability has been resolved: hfsplus: validate thread record before delete key rebuild hfsplusdeletecat is called with str == NULL when the last open reference to an unlinked HFS+ hardlink backing inode is closed. In that case, the function finds the catalog...

CVE-2026-93095

In the Linux kernel, the following vulnerability has been resolved: hfsplus: validate thread record before delete key rebuild hfsplusdeletecat is called with str == NULL when the last open reference to an unlinked HFS+ hardlink backing inode is closed. In that case, the function finds the catalog...

CVE-2026-93095 hfsplus: validate thread record before delete key rebuild

In the Linux kernel, the following vulnerability has been resolved: hfsplus: validate thread record before delete key rebuild hfsplusdeletecat is called with str == NULL when the last open reference to an unlinked HFS+ hardlink backing inode is closed. In that case, the function finds the catalog...

EUVD-2026-82203

In the Linux kernel, the following vulnerability has been resolved: hfsplus: validate thread record before delete key rebuild hfsplusdeletecat is called with str == NULL when the last open reference to an unlinked HFS+ hardlink backing inode is closed. In that case, the function finds the catalog...

CVE-2026-93095 hfsplus: validate thread record before delete key rebuild

In the Linux kernel, the following vulnerability has been resolved: hfsplus: validate thread record before delete key rebuild hfsplusdeletecat is called with str == NULL when the last open reference to an unlinked HFS+ hardlink backing inode is closed. In that case, the function finds the catalog...

CVE-2026-93095

CVE-2026-93095 is a Linux kernel out-of-bounds write in the hfsplus filesystem driver. In hfsplus_delete_cat(), when the last open reference to an unlinked HFS+ hardlink backing inode is closed (str == NULL), the function reconstructs the catalog key from thread.nodeName.length read directly from...

CVE-2026-93095: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hfsplus: validate thread record before delete key rebuild hfsplusdeletecat is called with str == NULL when the last open reference to an unlinked HFS+ hardlink backing inode is closed. In that case, the function finds the catalog...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hfsplus: The issue of missing hfsbnodeget in hfsbnodecreate has been fixed. When sync and link are called concurrently, both threads may enter hfsbnodefind, but fail to find the node in the hash table. As a result, they proceed t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: removing WARNON from hfspluscatread,writeinode. The syzbot tool encounters WARNON in hfspluscatread,writeinode, where a crafted filesystem image may contain invalid lengths. These conditions do not constitute kernel...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: fixed the KMSAN uninit-value issue in hfsplusextcacheextent The syzbot reported an issue in hfsplusextcacheextent: 70.194323 T9350 BUG: KMSAN: uninit-value in hfsplusextcacheextent+0x7d0/0x990 70.195022 T9350...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2. When attempting to mount an HFS+ partition, the hfsplus filesystem driver does not correctly set the ERRNO value. This issue may lead to a NULL pointer access...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: fixed a slab-out-of-bounds issue in hfsplusbnoderead The hfsplusbnoderead method can trigger this issue: 174.852007 T9784 ================================================================== 174.852709 T9784 BUG: KASAN:...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A use-after-free flaw was discovered in hfsplusputsuper in fs/hfsplus/super.c within the Linux kernel. This flaw could allow a local user to cause a denial of service problem...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: hfsplus: prevented corruption during the shrinking of truncate operations. I believe there are some issues introduced by commit 31651c607151 “hfsplus: avoided deadlock during file truncation”. HFS+ uses extent records, which alwa...

CVE-2026-80656

A flaw was found in the Linux kernel's hfsplus filesystem. A local attacker could provide a specially crafted and corrupted HFS+ image. When attempting to mount this image, a malformed btree node size value could lead to the use of an uninitialized value within the kernel. This could result in a...

Linux Distros Unpatched Vulnerability : CVE-2026-80656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 wit...