Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the drivers/mtd/ubi/vtbl.c file in the Linux kernel, up to version 6.7.4, it is possible for the code to attempt to allocate zero bytes, resulting in a crash due to a missing check for ubi-lebsize...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: md: fixed a crash in mempoolfree There is a crash in mempoolfree when running the lvm test using shell/lvchange-rebuild-raid.sh. The reason for the crash is as follows: - superwritten calls atomicdecandtest&mddev-pendingwrites an...

The vulnerability of the raid10_sync_request() function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types (RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the raid10syncrequest function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types RAID and LVM is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260629-73-0048

The vulnerability of the maxcorrectedreaderrorsstore function in the drivers/md/md.c module of the Linux device driver for multiple devices RAID and LVM involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow a...

CVE-2026-47224

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap buffer-overflow read exists in the LVM2 physical-volume metadata parser in NanaZip via the upstream 7-Zip LvmHandler. The vulnerability is triggered when openin...

CVE-2026-47224 NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap buffer-overflow read exists in the LVM2 physical-volume metadata parser in NanaZip via the upstream 7-Zip LvmHandler. The vulnerability is triggered when openin...

CVE-2026-47224 NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap buffer-overflow read exists in the LVM2 physical-volume metadata parser in NanaZip via the upstream 7-Zip LvmHandler. The vulnerability is triggered when openin...

EUVD-2026-36507

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap buffer-overflow read exists in the LVM2 physical-volume metadata parser in NanaZip via the upstream 7-Zip LvmHandler. The vulnerability is triggered when openin...

CVE-2026-47224

Summary: CVE-2026-47224 affects NanaZip on Windows: a heap buffer-overflow read in the LVM2 physical-volume metadata parser (via the upstream 7-Zip LvmHandler) can be triggered by opening a crafted LVM disk image. Affected are NanaZip versions 3.0.1000.0 through 6.0.1697.999; the issue is fixed i...

The vulnerability of the md_bitmap_resize() function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mdbitmapresize function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability in the driver module md/raid10.c of several Linux device drivers (RAID and LVM), which allows a hacker to cause a service failure.

The vulnerability in the drivers/md/raid10.c driver for multiple Linux device types RAID and LVM involves incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the mddev_unlock() function in the drivers/md/md.c module of the Linux operating system’s device drivers for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mddevunlock function in the drivers/md/md.c module of the Linux operating system’s device drivers such as RAID and LVM devices is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the dm_integrity_ctr() function in the drivers/md/dm-integrity.c file of the support for multiple devices (RAID and LVM) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmintegrityctr function in the drivers/md/dm-integrity.c file of the support for multiple devices RAID and LVM in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromis...

The vulnerabilities of the functions list_version_get_needed() and __list_versions() in the drivers/md/dm-ioctl.c file of the Linux operating system’s RAID and LVM device driver module allow a hacker to cause a service failure.

The vulnerability of the listversiongetneeded and listversions functions in the drivers/md/dm-ioctl.c driver for multiple device drivers RAID and LVM in the Linux kernel is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a...

The vulnerability of the rdev_addable() function in the drivers/md/md.c module of the Linux device driver for multiple devices (RAID and LVM), which allows a hacker to cause a service failure.

The vulnerability of the rdevaddable function in the drivers/md/md.c module of the Linux device driver for multiple devices such as RAID and LVM is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

NewStart CGSL MAIN 6.06 (SP) : lvm2 Vulnerability (NS-SA-2026-0010)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has lvm2 packages installed that are affected by a vulnerability: - The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify...

Vulnerability of the do_journal_discard() function in the drivers/md/bcache/journal.c module – A driver for supporting multiple device types (RAID and LVM) in the Linux kernel, which allows a hacker to trigger a service failure.

Vulnerability of the dojournaldiscard function in the drivers/md/bcache/journal.c module – The driver for supporting multiple devices RAID and LVM in the Linux kernel is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause...

The vulnerability of the md_bitmap_read_sb() function in the drivers/md/md-bitmap.c file of the driver module exposes it to being exploited by attackers, causing service interruptions for systems supporting multiple devices such as RAID and LVM in the Linux kernel.

The vulnerability of the mdbitmapreadsb function in the drivers/md/md-bitmap.c file of the Linux support module for multiple devices RAID and LVM involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the raid_message() function in the drivers/md/dm-raid.c module of the Linux kernel support for multiple device types (RAID and LVM) allows a hacker to cause a service failure.

The vulnerability of the raidmessage function in the drivers/md/dm-raid.c module of the Linux support for multiple device types RAID and LVM is related to the occurrence of mutual locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the destroy() function in the drivers/md/dm-cache-target.c file of the Linux operating system’s device driver framework for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the destroy function in the drivers/md/dm-cache-target.c file of the Linux kernel driver for multiple device drivers such as RAID and LVM is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...