CVE-2021-46923

In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after mountkattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We...

DEBIAN-CVE-2021-46923

In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after mountkattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We...

UBUNTU-CVE-2021-46923

In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after mountkattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We...

Linux kernel security vulnerabilities

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from a leak in fs/mountsetattr...

kernel: mm/secretmem: fix panic when growing a memfd_secret

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix panic when growing a memfdsecret When one tries to grow an existing memfdsecret with ftruncate, one gets a panic 1. For example, doing the following reliably induces the panic: fd = memfdsecret; ftruncatefd, 10;...

PT-2023-36606

Уязвимость функции do mount setattr модуля fs/namespace.c файловой системы ядра операционной системы Linux связана с раскрытием конфиденциальной информации. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

SUSE CVE-2015-1350

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service capability stripping via a failed invocation of a system call, as...

SUSE CVE-2015-8660

The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...

SUSE CVE-2016-1969

The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted Graphite smart font...

GSD-2022-1000486 NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes

NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000411 NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes

NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

PT-2022-28760

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.10 Description The issue concerns the handling of large file sizes in NFSv3 SETATTR/CREATE operations. The actual impact and potential for attacks have not been confirmed yet. Recommendations For Linux Kerne...

PT-2022-28685

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue concerns the handling of large file sizes in NFSv3 SETATTR/CREATE operations. The actual impact and potential for attacks have not been confirmed yet. Recommendations For Linux Kern...

PT-2024-10535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the NFSD component of the Linux kernel, specifically with the handling of large file sizes in NFSv3 SETATTR/CREATE procedures. The iattr::ia size is a loff t, and...

PT-2024-10534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an integer underflow in the NFSD component of the Linux kernel. This underflow occurs because the ia size variable, which is a signed 64-bit type, can be assigned...

PT-2022-28351

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue is related to the fs/mount setattr function, which may not properly cleanup mount kattr. This could potentially lead to security vulnerabilities, although the actual impact and atta...

PT-2021-30951

Уязвимость функции parsec inode setattr модуля ядра linux-astra-modules связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2021-28198

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Stack-use-after-return READ 4. The crash state involves the v9fs setattr function and coroutine trampoline. No...

libreoffice:htmlfuzzer: Bad-cast to SwFormat from SwClient in SwHTMLParser::SetAttr_

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5205016312545280 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

kernel: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr

In the Linux kernel afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free UAF in sockfssetattr. A local attacker can use this flaw to escalate privileges and take control of the system...