15 matches found
EUVD-2026-48942
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTLSETZERODATA FSCTLSETZERODATA in smb2ioctl destroys file data via ksmbdvfszerodata - vfsfallocatePUNCHHOLE/ZERORANGE after checking only the share-level KSMBDTREECONNFLAGWRITABLE, with no...
PT-2026-64619
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc7 Description An authenticated SMB client can bypass permission checks in the ksmbd module. The smb2 ioctl function fails to perform a per-handle access check when processing FSCTL SET ZERO DATA, relying on...
Astra Linux – Vulnerability in Linux 5.15
A flaw in the NULL Pointer Dereference mechanism within the Linux kernel’s NTFS3 driver function attrpunchhole was identified. A local user could exploit this flaw to crash the system...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010717)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010717 advisory. A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attrpunchhole was found. A local user could use this flaw to crash the system. Tenable has...
CVE-2026-30784
...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002350)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002350 advisory. mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to...
Linux Distros Unpatched Vulnerability : CVE-2022-4842
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attrpunchhole was found. A local user could use this flaw to crash the system...
CVE-2025-38221
In the Linux kernel, the following vulnerability has been resolved: ext4: fix out of bounds punch offset Punching a hole with a start offset that exceeds maxend is not permitted and will result in a negative length in the truncateinodepartialfolio function while truncating the page cache,...
CVE-2023-52759
CVE-2023-52759 is rejected/withdrawn and does not represent an active vulnerability entry.
DEBIAN-CVE-2021-47114
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption by fallocate When fallocate punches holes out of inode size, if original isize is in the middle of last cluster, then the part from isize to the end of the cluster will be zeroed with buffer write, at...
Ubuntu 20.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6134-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6134-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some...
SUSE CVE-2022-4842
A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attrpunchhole was found. A local user could use this flaw to crash the system...
The vulnerability of the NTFS file system driver in Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of the NTFS file system driver in Linux operating systems is related to the assignment of a null pointer in the attrpunchhole function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel 代码问题漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a code issue vulnerability that originates from a problem in the attrpunchhole function of the NTFS3 driver, which can be exploited by local users to crash the system...