8082 matches found
UBUNTU-CVE-2024-55641
In the Linux kernel, the following vulnerability has been resolved: xfs: unlock inodes when erroring out of xfstransallocdir Debugging a filesystem patch with generic/475 caused the system to hang after observing the following sequences in dmesg: XFS dm-0: metadata I/O error in...
CVE-2024-55642 block: Prevent potential deadlocks in zone write plug error recovery
In the Linux kernel, the following vulnerability has been resolved: block: Prevent potential deadlocks in zone write plug error recovery Zone write plugging for handling writes to zones of a zoned block device always execute a zone report whenever a write BIO to a zone fails. The intent of this i...
CVE-2024-55642
CVE-2024-55642: In the Linux kernel, the zone write plug error recovery could deadlock if a device queue freeze occurred while BIOs were plugged and a write failed. The automatic use of report zones after a failed write was removed, and recovery now relies on the user/driver to perform report zon...
CVE-2024-48875 btrfs: don't take dev_replace rwsem on task already holding it
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't take devreplace rwsem on task already holding it Running fstests btrfs/011 with MKFSOPTIONS="-O rst" to force the usage of the RAID stripe-tree, we get the following splat from lockdep: BTRFS info device sdd:...
AZL-55369 CVE-2024-56774 affecting package kernel for versions less than 5.15.176.3-1
In the Linux kernel, the following vulnerability has been resolved: btrfs: add a sanity check for btrfs root in btrfssearchslot Syzbot reports a null-ptr-deref in btrfssearchslot. The reproducer is using rescue=ibadroots, and the extent tree root is corrupted thus the extent tree is NULL. When...
Command Execution Vulnerability in Operation and Maintenance Management Audit System of Shanghai Shangxun Information Technology Co.
hereinafter referred to as "SinoCom-ArtM" is one of the leading providers of data, intelligent security operation and maintenance, mobile security, security services and other fields in China. A command execution vulnerability exists in the Operations and Maintenance Management and Audit System o...
CVE-2024-56759
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a COWing a tree block, at btrfscowblock, and we have the tracepoint tracebtrfscowblock enabled and preemption is also enabled CONFIGPREEMPT=y, we can...
CVE-2024-56759 btrfs: fix use-after-free when COWing tree bock and tracing is enabled
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a COWing a tree block, at btrfscowblock, and we have the tracepoint tracebtrfscowblock enabled and preemption is also enabled CONFIGPREEMPT=y, we can...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the atxdmac driver of the dmaengine module, where the atxdmacmemsetcreatedesc function may return NULL,...
PT-2025-36303
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where spurious interrupts can occur during probe operations in the media subsystem, specifically within the venus driver. This happens if an interrupt is...
PT-2025-36265
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash can occur if an ethtool operation is invoked after the shutdown function is called. The shutdown function is invoked during system shutdown to stop DMA operations. In gve, shutdo...
PT-2025-40072
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap overflow issue was identified and resolved in the e1000 set eeprom function. The fix involves adding input validation for the length of changes requested in the EEPROM. The variab...
PT-2025-52655
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc7-next-20250922-00010-g41050493b2bd Description A flaw exists in the Linux kernel's Renesas USB Host Controller driver usbhs. Specifically, a synchronous external abort can occur on the Renesas RZ/G3S So...
PT-2026-4370
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's RDMA/core component related to reference counting within the ib del sub device and put function. Specifically, the code fails to drop a device referen...
PT-2026-8176
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the parse durable handle context function within the smb/server component of the Linux kernel. This occurs when a command is a replay operation and retur...
PT-2025-37971
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The 'use' field within the rose neigh structure was not atomic, leading to potential race conditions. Specifically, the structure could be freed while still being referenced, potentially...
PT-2026-2866
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4 Description The Linux kernel had an issue in the f2fs file system related to the management of slab caches for extended attributes. Specifically, the system was creating per-superblock slab caches, whi...
TeamPass mail_me operation authorization issue
TeamPass before 3.1.3.1 does not properly check whether a mailme aka actionmail operation is on behalf of an administrator or manager...
