17 matches found
UBUNTU-CVE-2026-64216
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfsunlockabandonedreadpages netfsunlockabandonedreadpagesrreq accesses the index of the folios it is wanting to unlock and compares that to rreq-nounlockfolio so that it doesn't unlock a folio being...
CVE-2026-64216
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfsunlockabandonedreadpages netfsunlockabandonedreadpagesrreq accesses the index of the folios it is wanting to unlock and compares that to rreq-nounlockfolio so that it doesn't unlock a folio being...
DEBIAN-CVE-2026-64216
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfsunlockabandonedreadpages netfsunlockabandonedreadpagesrreq accesses the index of the folios it is wanting to unlock and compares that to rreq-nounlockfolio so that it doesn't unlock a folio being...
EUVD-2026-48624
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfsunlockabandonedreadpages netfsunlockabandonedreadpagesrreq accesses the index of the folios it is wanting to unlock and compares that to rreq-nounlockfolio so that it doesn't unlock a folio being...
CVE-2026-64216
CVE-2026-64216: Linux kernel netfs UAF fix. The issue occurs in netfs_unlock_abandoned_read_pages() (and netfs_unlock_read_folio()) where the code dereferenced an index after NETFS_RREQ_IN_PROGRESS was cleared, risking access to the folio protected by no_unlock_folio. The fix stores the folio poi...
CVE-2026-64216 netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfsunlockabandonedreadpages netfsunlockabandonedreadpagesrreq accesses the index of the folios it is wanting to unlock and compares that to rreq-nounlockfolio so that it doesn't unlock a folio being...
CVE-2026-53018
In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid reading already updated pages during GC We found the following issue during fuzz testing: page: refcount:3 mapcount:0 mapping:00000000b6e89c65 index:0x18b2dc pfn:0x161ba9 memcg:f8ffff800e269c00 aops:f2fsmetaaops ino:2...
Azure Linux 3.0 Security Update: kernel (CVE-2024-46687)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46687 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting...
DEBIAN-CVE-2024-57839
In the Linux kernel, the following vulnerability has been resolved: Revert "readahead: properly shorten readahead when falling back to dopagecachera" This reverts commit 7c877586da3178974a8a94577b6045a48377ff25. Anders and Philippe have reported that recent kernels occasionally hang when used wit...
UBUNTU-CVE-2024-57839
In the Linux kernel, the following vulnerability has been resolved: Revert "readahead: properly shorten readahead when falling back to dopagecachera" This reverts commit 7c877586da3178974a8a94577b6045a48377ff25. Anders and Philippe have reported that recent kernels occasionally hang when used wit...
DEBIAN-CVE-2023-52852
In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to avoid use-after-free on dic Call trace: memcpy+0x128/0x250 f2fsreadmultipages+0x940/0xf7c f2fsmpagereadpages+0x5a8/0x624 f2fsreadahead+0x5c/0x110 pagecacheraunbounded+0x1b8/0x590...
UBUNTU-CVE-2023-52852
In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to avoid use-after-free on dic Call trace: memcpy+0x128/0x250 f2fsreadmultipages+0x940/0xf7c f2fsmpagereadpages+0x5a8/0x624 f2fsreadahead+0x5c/0x110 pagecacheraunbounded+0x1b8/0x590...
IBM Edge 安全漏洞
Edge is a Node.js logic and template engine that contains batteries. IBM Edge is vulnerable to an information disclosure vulnerability that stems from the program allowing web pages to be stored locally, which could be exploited by an attacker to read those pages...
Heap overflow
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...
PT-2020-19176
Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to a heap-based buffer over-read in the read pages map function located in decode r2007.c. Recommendations For GNU LibreDWG version 0.9.3.2564, consider updating to a newer versi...
Atlassian Confluence Authentication Bypass Vulnerability
Atlassian Confluence is a professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build an enterprise WiKi. the software enables collaboration and knowledge sharing between team members. Atlassian Confluence suffers from an...