Lucene search
+L

24 matches found

OSV
OSV
added 2025/08/22 4:01 p.m.9 views

CVE-2025-38660 [ceph] parse_longname(): strrchr() expects NUL-terminated string

In the Linux kernel, the following vulnerability has been resolved: ceph parselongname: strrchr expects NUL-terminated string ... and parselongname is not guaranteed that. That's the reason why it uses kmemdupnul to build the argument for kstrtou64; the problem is, kstrtou64 is not the only thing...

9.8CVSS6.1AI score
SaveExploits0References8
Cvelist
Cvelist
added 2025/08/22 4:01 p.m.19 views

CVE-2025-38660 [ceph] parse_longname(): strrchr() expects NUL-terminated string

In the Linux kernel, the following vulnerability has been resolved: ceph parselongname: strrchr expects NUL-terminated string ... and parselongname is not guaranteed that. That's the reason why it uses kmemdupnul to build the argument for kstrtou64; the problem is, kstrtou64 is not the only thing...

9.8CVSS0.00389EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/08/22 4:01 p.m.14 views

CVE-2025-38660

In the Linux kernel, the following vulnerability has been resolved: ceph parselongname: strrchr expects NUL-terminated string ... and parselongname is not guaranteed that. That's the reason why it uses kmemdupnul to build the argument for kstrtou64; the problem is, kstrtou64 is not the only thing...

9.8CVSS5.3AI score0.00389EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/02/18 12:00 a.m.23 views

PT-2025-34421

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The parse longname function in the Ceph subsystem does not guarantee a NUL-terminated string when using strrchr, leading to a potential issue. The function utilizes kmemdup nul to crea...

5.5CVSS6AI score0.00389EPSS
SaveExploits0
Rows per page
Query Builder