PT-2022-30956

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns a lack of sanity check on inline dots inode in f2fs. It was introduced in version v4.1 and fixed in version v5.18.3. The actual impact and attack plausibility have not yet...

PT-2022-31585

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.1 through v5.15.45 Description A potential security issue has been identified in the f2fs component of the Linux Kernel, related to the handling of inline dots inode. The actual impact and attack plausibility have not...

PT-2022-30865

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential security issue has been identified in the ext4 file system, specifically related to the handling of inode extensions. The actual impact and likelihood of a successful attack have n...

PT-2025-8640

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A NULL pointer issue has been identified in the Linux kernel when resizing a corrupt ext4 image with the resize inode feature disabled. This issue can be reproduced by creating an ex...

kernel: security regression for CVE-2018-13405

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...

kernel: security regression for CVE-2018-13405

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...

PT-2025-8286

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the issue described. Description The issue arises when there is an attempt to set an inode's size to a value larger than its current size, but the ext4 mark inode dirty...

kernel: security regression for CVE-2018-13405

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...

kernel: security regression for CVE-2018-13405

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...

ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing NTFS inodes, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS inode pathname, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

PT-2025-8298

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the f2fs file system. The issue occurs when the f2fs evict inode function is called, causing a dirty inode to not b...

CLSA-2022-1651146021 Fix of CVE: CVE-2022-0617, CVE-2021-40490, CVE-2021-29154, CVE-2022-0435, CVE-2021-4154, CVE-2021-3753, CVE-2021-38160, CVE-2021-45485, CVE-2021-3752, CVE-2021-41864, CVE-2021-4083, CVE-2021-26930

udf: Restore ilenAlloc when inode expansion fails Jan Kara CVE-2022-0617 - udf: Fix NULL ptr deref when converting from inline format Jan Kara CVE-2022-0617 - Bluetooth: fix use-after-free error in locksocknested Wang ShaoBo CVE-2021-3752 - vtkdsetmode: extend console locking Linus Torvalds...

PHP phar_set Code Execution

The vulnerability of the pharset inode function in the PHP language interpreter arises due to buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2022-1523)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of memory bounds write flaw 1 or 2 bytes of memory in the Linux kernel NFS subsystem was found in the way users use mirroring replication...

GSD-2022-1002330 ubifs: Fix deadlock in concurrent rename whiteout and inode writeback

ubifs: Fix deadlock in concurrent rename whiteout and inode writeback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...

GSD-2022-1002209 ubifs: Fix deadlock in concurrent rename whiteout and inode writeback

ubifs: Fix deadlock in concurrent rename whiteout and inode writeback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1002032 ubifs: Fix deadlock in concurrent rename whiteout and inode writeback

ubifs: Fix deadlock in concurrent rename whiteout and inode writeback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001763 ubifs: Fix deadlock in concurrent rename whiteout and inode writeback

ubifs: Fix deadlock in concurrent rename whiteout and inode writeback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001541 dax: make sure inodes are flushed before destroy cache

dax: make sure inodes are flushed before destroy cache This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...