Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013220 advisory. In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARNON from hfspluscatread,writeinode syzbot is hitting WARNON in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007483 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutexlock check in hfsplusfreeextents Syzbot reported an issue in hfsplus...

ROS-20260407-73-0011

A vulnerability in the fs/hfsplus/unicode.c component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability allows an attacker to gain access to confidential data, violate its integrity, and cause denial of service...

ROS-20260403-73-0008

A vulnerability in the fs/hfsplus/extents.c component of the Linux operating system kernel is related to insufficient locking. Exploitation of the vulnerability allows an attacker to cause a denial of service...

hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()

...

Exploit for XML Entity Expansion in Cisco Secure_Endpoint

CVE-2023-20052 Exploit - Fixed Build Fixed Docker build for C...

The vulnerability of the hfsplus package for working with the HFS+ file system in Linux kernels allows a attacker to cause a service failure or expose protected information.

The vulnerability of the hfsplus package for working with the HFS+ file system in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures or expose sensitive information...

The vulnerability of the hfs_bnode_get() function in the fs/hfsplus/bnode.c module of the toolset for working with the HFS+ file system hfsplus in Linux’s operating systems allows a hacker to cause a service failure.

The vulnerability of the hfsbnodeget function in the fs/hfsplus/bnode.c module of the Linux toolset for working with the HFS+ file system hfsplus in Linux is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000573 advisory. Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus...

hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create

...

CVE-2025-68767

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Verify inode mode when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 16bits "mode" field loaded from disk are corrupted. According to 1, the permissions...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002423)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002423 advisory. Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001777 advisory. Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002775 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfspluslookup in fs/hfsplus/dir.c when opening a file...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003372 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfspluslookup in fs/hfsplus/dir.c when opening a file...

SUSE CVE-2025-68767

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Verify inode mode when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 16bits "mode" field loaded from disk are corrupted. According to 1, the permissions...

MiracleLinux 3 : kernel-2.6.18-308.6.AXS3 (AXSA:2012-1007:07)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-1007:07 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operatin...

CVE-2025-68767

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Verify inode mode when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 16bits "mode" field loaded from disk are corrupted. According to 1, the permissions...

AZL-74315 CVE-2025-68767 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Verify inode mode when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 16bits "mode" field loaded from disk are corrupted. According to 1, the permissions...

AZL-74445 CVE-2025-68774 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently, both threads may enter hfsbnodefind without finding the node in the hash table and proceed to create it. Thread A: hfspluswriteinode -...