EUVD-2025-11222

Malicious code in bioql PyPI...

CVE-2025-22079 ocfs2: validate l_tree_depth to avoid out-of-bounds access

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate ltreedepth to avoid out-of-bounds access The ltreedepth field is 16-bit le16, but the actual maximum depth is limited to OCFS2MAXPATHDEPTH. Add a check to prevent out-of-bounds access if ltreedepth has an invalid...

CVE-2025-22079

The CVE-2025-22079 issue affects the Linux kernel OCFS2 path handling. A 16-bit l_tree_depth could exceed OCFS2_MAX_PATH_DEPTH, risking out-of-bounds access (noted when reading from a corrupted mounted disk). A fix was implemented to validate l_tree_depth and guard against invalid values, prevent...