DEBIAN-CVE-2024-35844

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix reservecblocks counting error when out of space When a file only needs one directnode, performing the following operations will cause the file to be unrepairable: unisoc ./f2fsio compress test.apk unisoc df -h...

UBUNTU-CVE-2024-35844

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix reservecblocks counting error when out of space When a file only needs one directnode, performing the following operations will cause the file to be unrepairable: unisoc ./f2fsio compress test.apk unisoc df -h...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a count error in Reservecblocks when space is low...

The vulnerability of the `btrfs_use_block_rsv()` function in the `fs/btrfs/block-rsv.c` file of the Linux kernel’s file system allows a malicious actor to cause a service failure.

The vulnerability of the btrfsuseblockrsv function in the fs/btrfs/block-rsv.c file of the btrfs file system in the Linux kernel is related to concurrent resource access race condition. Exploiting this vulnerability could allow a attacker to cause service failures...

CVE-2022-48696 regmap: spi: Reserve space for register address/padding

In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the maxrawread and maxrawwrite limits in regmapspi struct do not take into account the additional size of the transmitted register address and padding. This may...

CVE-2022-48696

In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the maxrawread and maxrawwrite limits in regmapspi struct do not take into account the additional size of the transmitted register address and padding. This may...

CVE-2024-26905

A flaw was found in the btrfs filesystem, which involves data races when accessing reserved block reserves. These data races can lead to unpredictable behavior or system crashes. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Ha...

CVE-2024-26905

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-26904

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-26904

CVE-2024-26904 is a rejected CVE . The Initial document states: “Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.” Connected Nessus/Mariner entries corroborate this; e.g., MARINER_CVE-2024-26904.NASL shows the CVE was explicitly withdrawn, and CBLMARINER...

CVE-2024-26905

CVE-2024-26905 is rejected by the CNA and not a valid vulnerability entry.

CVE-2024-26904

Removed by vendor...

SUSE CVE-2021-47214

In the Linux kernel, the following vulnerability has been resolved: hugetlb, userfaultfd: fix reservation restore on userfaultfd error Currently in the iscontinue case in hugetlbmcopyatomicpte, if we bail out using "goto outreleaseunlock;" in the cases where idx = size, or !hugeptenone, the code...

CVE-2021-47214

In the Linux kernel, the following vulnerability has been resolved: hugetlb, userfaultfd: fix reservation restore on userfaultfd error Currently in the iscontinue case in hugetlbmcopyatomicpte, if we bail out using "goto outreleaseunlock;" in the cases where idx = size, or !hugeptenone, the code...

UBUNTU-CVE-2021-47214

In the Linux kernel, the following vulnerability has been resolved: hugetlb, userfaultfd: fix reservation restore on userfaultfd error Currently in the iscontinue case in hugetlbmcopyatomicpte, if we bail out using "goto outreleaseunlock;" in the cases where idx = size, or !hugeptenone, the code...

CVE-2024-2311

CVE-2024-2311 affects Avada (WordPress theme) up to version 7.11.6. The vulnerability is a Stored XSS via plugin shortcodes due to insufficient input sanitization and output escaping of user-supplied shortcode attributes. Exploitation requires contributor-level or higher authentication, and affec...

CVE-2024-30250

Astro-Shield (KindSpells) vulnerability CVE-2024-30250 affects versions 1.2.0–1.3.1, where injecting a correct SRI attribute into code causes the injected resource to be considered legitimate by CSP, enabling bypass of cross-origin allow-lists. Root cause: the SRI hash is added to the CSP header,...

blue-springs-scout-reserve.ca Cross Site Scripting vulnerability OBB-3888391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OESA-2024-1299 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock when cloning inline extents and using qgroups There are a few exceptional cases where cloning an inline extent needs to copy the inline exten...

UBUNTU-CVE-2024-26636

In the Linux kernel, the following vulnerability has been resolved: llc: make llcuisendmsg more robust against bonding changes syzbot was able to trick llcuisendmsg, allocating an skb with no headroom, but subsequently trying to push 14 bytes of Ethernet header 1 Like some others, llcuisendmsg...