ThisSeemsWrong

此问题的修复以 CVE-2024-49746 的形式出现：公告，补丁 "这看起来不对" 上面的标题是来自 Parcel::continueWrite 方法 的注释，该方法实际上负责调整 Parcel 对象的大小，无论是用户显式请求时（例如通过 setDataSize），还是在当前数据容量过小时调用某个 write 方法cpp statust Parcel::continueWritesizet desired // SNIP: Validate desired size // SNIP: Assign kernelFields & rpcFields from variant membe...

CVE-2025-6019

CVE-2025-6019 PoC 针对 UDisks2 XFS 调整大小权限提升的简单概念验证。 文件 createpayload.sh：构建包含 SUID rootbash 载荷的 XFS 镜像。 exploit.sh：触发调整大小路径并启动 SUID shell。 要求 mkfs.xfs、udisksctl、gdbus、loginctl 一个 allowactive Polkit 会话（例如，物理控制台登录，或通过另一个漏洞（如 CVE-2025-6018）获得的会话） 由 createpayload.sh 生成的精心构造的 XFS 文件系统镜像 用法 1. 创建载荷镜像：...

CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation

CVE-2025-6019：udisks2 XFS 调整大小 TOCTOU 权限提升 此仓库包含 CVE-2025-6019 的概念验证 PoC 漏洞利用代码，该漏洞是 udisks2 中的一个竞争条件漏洞，允许通过 XFS 文件系统调整大小实现本地权限提升。 🎯 目标环境与兼容性 该利用代码设计为适用于满足以下条件的任何 Linux 系统，具有通用性： 易受攻击的服务：udisks2（启用了 D-Bus 访问）。 文件系统工具：已安装 xfsprogs（特别是 mkfs.xfs）。 架构：无关（可在 x86、x64、ARM 等架构上运行）。 ✅ 已验证环境...

CVE-2025-6019-exploit

CVE-2025-6019: Exploit de Escalada de Privilegios mediante Redimensionamiento del Sistema de Archivos UDisks2 Detalles de la Vulnerabilidad ID de CVE : CVE-2025-6019 Impacto : Escalada Local de Privilegios LPE Sistemas Afectados : Sistemas Linux con versiones vulnerables de udisks2 Mecanismo : Un...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Avoid failures during online resizing due to an overly large flexbgsize. When we perform online resizing on an ext4 filesystem with an excessively large flexbgsize, the following warning is triggered:...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick’s MagickCore/resize.c file. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, including division by zero in mathematics. The highest threat from this vulnerability is to system availability...

Astra Linux – Vulnerability in openexr

OpenEXR provides the specification and reference implementation of the EXR file format, a image storage format for the motion picture industry. In versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, there was an integer overflow in ImageChannel::resize, which led t...

CVE-2025-6018-and-CVE-2025-6019

检查它是否易受攻击 rpm -q pam || dpkg -l | grep libpam or find /etc/pam.d/ -name '' -exec grep -l 'pamenv' \; 2/dev/null or find /etc/pam.d/ -name '' -exec grep -l 'pamsystemd' \; 2/dev/null or systemctl --version | head -1 如果版本包含：（检测到易受攻击的 PAM 版本） 参考 cve20256018 "pam-1.3.0", "pam-1.3.1", "pam-1.4.0",...

CVE-2025-6018-6019

CVE-2025-6018 CVE-2025-6019 PoC 漏洞利用 本地权限提升（LPE）- openSUSE / SUSE Linux Enterprise 15 适用于 CVE-2025-6018 和 CVE-2025-6019 的有效 PoC/漏洞利用 - 在 openSUSE Leap 15.x 和 SUSE Linux Enterprise 15.x 上实现从非特权用户到 root 的权限提升 🎯 快速摘要 CVE ID| 漏洞| 影响 ---|---|--- CVE-2025-6018| PAM 环境变量注入| 绕过以获取 allowactive polkit 状态...

libparted-fs-resize0-3.8-1.1 on GA media (moderate)

libparted-fs-resize0-3.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11924-1 Rating: moderate Cross-References: CVE-2026-89085 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Rocky Linux 9.6 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778760144)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778760144 advisory. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion...

AlmaLinux 9.6 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778760144)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778760144 advisory. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778756042)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778756042 advisory. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion...

Fedora 43 : parted (2026-b56266ea73)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b56266ea73 advisory. - parted: Fix partition number allocation in doprint bcl - fdasd: Make sure data set name is positive bcl - resize: Make sure hfscnewcachetable cann...

SUSE CVE-2026-97605

In the Linux kernel, the following vulnerability has been resolved: erofs: preserve LZMA decoders on resize failure The pool-resize path frees each stream's old decoder before allocating its replacement. If an allocation fails after some streams have already been replaced, the failed stream is pu...

PT-2026-105633

These are all security issues fixed in the libparted-fs-resize0-3.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11924-1 libparted-fs-resize0-3.8-1.1 on GA media

These are all security issues fixed in the libparted-fs-resize0-3.8-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-97505

A flaw was found in the Linux kernel. Missing authorization checks in the PCI sysfs interface can allow a local user to cause a denial of service DoS. The kernel fails to verify administrative capabilities when resizing a device Base Address Register BAR, relying only on basic file access...

PT-2026-107771

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=566549189 Crash type: Heap-buffer-overflow READ 1 Crash state: screen resize cursor window pane resize layout fix panes...

DEBIAN-CVE-2026-97605

In the Linux kernel, the following vulnerability has been resolved: erofs: preserve LZMA decoders on resize failure The pool-resize path frees each stream's old decoder before allocating its replacement. If an allocation fails after some streams have already been replaced, the failed stream is pu...