Security Bulletin: Vulnerability in mount affects AIX (CVE-2021-38990)

Summary There is a vulnerability in the mount command that affects AIX. Vulnerability Details CVEID:CVE-2021-38990 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. CVSS Base score: 8.4 CVSS Temporal...

udisks2 security and bug fix update

2.9.0-9 - Fix LVM-VDO statistics tests 2023880,2025483 - Fix GError ownership 1999149 2.9.0-8 - CVE-2021-3802: Harden the default mount options for ext filesystems 2004422...

openSUSE: Security Advisory for libsolv, (SUSE-SU-2022:1157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-3219

Name of the Vulnerable Software and Affected Versions NTFS-3G versions through 2021.8.22 Description The issue is related to an invalid return code in the fuse kern mount function of the libfuse-lite library for the NTFS-3G file system, which enables the interception of libfuse-lite protocol...

OESA-2022-1626 cifs-utils security update

The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. The in-kernel CIFS filesystem relies on a set of user-space tools. That package of tools is called cifs-utils.Although not really part of Samba proper, these tools were originally part of the...

kernel: tcp: fix page frag corruption on page fault

A vulnerability was found in the Linux kernel's TCP subsystem in the tcpsendmsglocked function, which can lead to page fragment corruption during a page fault, which occurs when a TCP stream experiences nested access to the task page fragment due to a page fault while handling memory-mapped...

RLSA-2022:1820 Low: udisks2 security and bug fix update

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisks2: insecure defaults in user-accessible mount helpers allow for a DoS CVE-2021-3802 For more details about the security issues, including the impact,...

PT-2022-6155 · Mikrotik · Mikrotik Routeros

Name of the Vulnerable Software and Affected Versions: MikroTik RouterOS version 7.4beta4 Description: The issue is related to the container package in MikroTik RouterOS, which allows an attacker to create mount points pointing to symbolic links. These links can resolve to locations on the host...

[SECURITY] Fedora 36 Update: cifs-utils-6.15-1.fc36

The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. This package contains tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS...

CVE-2022-27239

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges...

ALPINE-CVE-2022-27239

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges...

UBUNTU-CVE-2022-27239

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges...

GSD-2022-1001916 ocfs2: fix crash when mount with quota enabled

ocfs2: fix crash when mount with quota enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001601 ext4: make mb_optimize_scan performance mount option work with extents

ext4: make mboptimizescan performance mount option work with extents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001306 ocfs2: fix crash when mount with quota enabled

ocfs2: fix crash when mount with quota enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001294 ext4: make mb_optimize_scan performance mount option work with extents

ext4: make mboptimizescan performance mount option work with extents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29579

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15 through 5.17.1 Description The issue is related to a crash when mounting with quota enabled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 5.15 through...

PT-2022-30408

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do mount fs function. This problem was introduced in version v2.6.15 and fixed in version...

PT-2022-30785

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do mount fs function. This problem was introduced in version v2.6.15 and fixed in version...

PT-2022-30646

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do mount fs function. This problem was introduced in version v2.6.15 and is fixed in version...