1186 matches found
CVE-2026-23265
Summary: CVE-2026-23265 relates to the Linux kernel F2FS filesystem. The issue arises from a faulty sanity check on the node footer during read/end_io paths, leading to an inconsistency between the node page index (nid) and footer.nid. If a node page footer is corrupted (e.g., in a fuzzed image) ...
CVE-2026-23265 f2fs: fix to do sanity check on node footer in {read,write}_end_io
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer in read,writeendio ----------- cut here ------------ kernel BUG at fs/f2fs/data.c:358! Call Trace: blkupdaterequest+0x5eb/0xe70 block/blk-mq.c:987 blkmqendrequest+0x3e/0x70...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: media: iris: Add sanity check for stop streaming Add sanity check in irisvb2stopstreaming. If inst-state is already IRISINSTERROR, we should skip the streamoff operation because it would still send packets to the firmware. In...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005672)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005672 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds/overflow in nilfssb2badoffset Patch series nilfs2: fix UBSAN...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-005605)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005605 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity check on the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005711)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005711 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sitbitmapsize w/ below testcase, resize will generate a corrupted...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005485)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005485 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sitbitmapsize w/ below testcase, resize will generate a corrupted...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005537)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005537 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per dmap tree syzbot report a out of bounds in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005522)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005522 advisory. In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset like 0xFFF0...
The vulnerability of the sanity_check_curseg() function in the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sanitycheckcurseg function in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem
A vulnerability was found in the Linux kernel's blockinvalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with user privilege to cause a denial of service DOS problem...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005186)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005186 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver...
curl: Integer Underflow in src/var.c
Summary: A potential Integer Underflow vulnerability was identified in the setvariable function within src/var.c. the flaw occurs during the calculation of the variable content length clen when a byte range is specified. specifically, the code fails to validate if startoffset is greater than...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38347)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38347 advisory. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ino and...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38218)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38218 advisory. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37943)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37943 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid data access in...
SUSE CVE-2025-68812
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002066)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002066 advisory. The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG...
