CVE-2023-54121 btrfs: fix incorrect splitting in btrfs_drop_extent_map_range

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect splitting in btrfsdropextentmaprange In production we were seeing a variety of WARNON's in the extentmap code, specifically in btrfsdropextentmaprange when we have to call addextentmapping for our second spli...

CVE-2023-54121

CVE-2023-54121 affects the Linux kernel's btrfs extent_map handling. The bug in btrfs_drop_extent_map_range can miscalculate the length when skipping a pinned extent, leading to a faulty split of the next extent and creating an invalid extent_map that may overlap other entries and disrupt block c...

CVE-2023-54121 btrfs: fix incorrect splitting in btrfs_drop_extent_map_range

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect splitting in btrfsdropextentmaprange In production we were seeing a variety of WARNON's in the extentmap code, specifically in btrfsdropextentmaprange when we have to call addextentmapping for our second spli...

CVE-2023-54080 btrfs: zoned: skip splitting and logical rewriting on pre-alloc write

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: skip splitting and logical rewriting on pre-alloc write When doing a relocation, there is a chance that at the time of btrfsrelocclonecsums, there is no checksum for the corresponding region. In this case,...

CVE-2023-54080 btrfs: zoned: skip splitting and logical rewriting on pre-alloc write

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: skip splitting and logical rewriting on pre-alloc write When doing a relocation, there is a chance that at the time of btrfsrelocclonecsums, there is no checksum for the corresponding region. In this case,...

CVE-2023-54080

CVE-2023-54080 affects the Linux kernel in the btrfs zoned relocation path. When relocating and the corresponding region has no checksum, btrfs_finish_ordered_zoned() may reference an invalid checksum item, causing ordered_extent’s logical address to become invalid and later trigger a NULL pointe...

Linux Distros Unpatched Vulnerability : CVE-2023-54121

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix incorrect splitting in btrfsdropextentmaprange In production we were seeing a variety of WARNON's in the extentmap code, specifically in...

CVE-2023-54121: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect splitting in btrfsdropextentmaprange In production we were seeing a variety of WARNON's in the extentmap code, specifically in btrfsdropextentmaprange when we have to call addextentmapping for our second spli...

CLSA-2025-1766501126 elfutils: Fix of 3 CVEs

CVE-2025-1371: fix null pointer dereference in eu-readelf when processing corrupt ELF files with broken program headers - CVE-2025-1376: fix denial of service in libelf when processing sections without data elfstrptr on sections with shsize set but no data - CVE-2025-1377: fix denial of service...

CLSA-2025-1766412859 Fix CVE(s): CVE-2025-11840

SECURITY UPDATE: out-of-bounds read via vfinfo function in ldmisc.c CVE-16357 - debian/patches/CVE-2025-11840.patch: Prevent a NULL name for reloc howto at ld misc.c:527 to avoid a SEGV - CVE-2025-11840...

The vulnerability of the relocate_one_folio() function in the fs/btrfs/relocation.c module of the Btrfs file system support in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the relocateonefolio function in the fs/btrfs/relocation.c module of the Btrfs file system support in the Linux operating system is related to an unauthorized call to a validation function. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CLSA-2025-1765801626 Fix CVE(s): CVE-2025-1182

SECURITY UPDATE: memory corruption when handling malformed ELF files - debian/patches/CVE-2025-1182.patch: prevent illegal memory access in bfdelfrelocsymboldeletedp when processing corrupt ELF input - CVE-2025-1182...

Fedora 42 : wireshark (2025-f810869906)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f810869906 advisory. New version 4.6.1 Beware of the move of files from /usr/lib64/wireshark/extcap/ to /usr/libexec/wireshark/extcap. Any custom user scripts should be...

PT-2026-23739

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.46 Description The software contains a flaw where a null pointer dereference can occur when processing a specially crafted ELF binary with incorrectly formatted header fields. This happens during relocation...

PT-2026-23740

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.46 Description The software contains a double free issue when processing specially crafted ELF binaries with incorrect relocation data. Specifically, during Global Offset Table GOT relocation processing, the dum...

The vulnerability of the relocate_one_folio() function in the fs/btrfs/relocation.c module of the Btrfs file system support in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the relocateonefolio function in the fs/btrfs/relocation.c file of the Btrfs file system support module in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990892)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990892 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported ...

Updated binutils packages fix security vulnerabilities

GNU Binutils format.c bfdsetformat memory corruption. CVE-2025-1153 GNU Binutils ld elflink.c bfdelfgcmarkrsec heap-based overflow. CVE-2025-1176 GNU Binutils ld libbfd.c bfdputl64 memory corruption. CVE-2025-1178 GNU Binutils ld elflink.c bfdelfgcmarkrsec memory corruption. CVE-2025-1181 GNU...

MGASA-2025-0262 Updated binutils packages fix security vulnerabilities

GNU Binutils format.c bfdsetformat memory corruption. CVE-2025-1153 GNU Binutils ld elflink.c bfdelfgcmarkrsec heap-based overflow. CVE-2025-1176 GNU Binutils ld libbfd.c bfdputl64 memory corruption. CVE-2025-1178 GNU Binutils ld elflink.c bfdelfgcmarkrsec memory corruption. CVE-2025-1181 GNU...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988732)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988732 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix leak of rcvhdrtaildummykvaddr This buffer is currently allocated in hfi1init: if...