173 matches found
SUSE CVE-2017-5551
The simplesetacl function in fs/posixacl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOT...
SUSE CVE-2018-12233
In the eaget function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two different extended attribute names on the same file. This vulnerability can be triggered by an unprivileged user with the ability to creat...
SUSE CVE-2019-19319
In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4xattrsetentry use-after-free in fs/ext4/xattr.c when a large oldsize value is used in a memset call, aka CID-345c0dbf3a30...
PT-2025-53963
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to an inode leak within the ext4 xattr inode create function when handling errors during extended attribute operations. Specifically, if ext4...
PT-2022-7529
Name of the Vulnerable Software and Affected Versions GlusterFS version 11.0 Description The issue is related to a use-after-free error in the dht setxattr mds cbk function of the xlators/cluster/dht/src/dht-common.c component in the GlusterFS file system. This allows a remote attacker to cause a...
PT-2022-37690
Уязвимость функции parsec hook setxattr модуля ядра linux-astra-modules связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2021-27268
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.169 Description The issue concerns a potential security vulnerability in the f2fs file system. It involves a fix to perform a sanity check on the last xattr entry in the f2fs setxattr function. The actual...
PT-2021-27256
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.223 Description The issue concerns a potential security vulnerability in the Linux Kernel, specifically in the f2fs setxattr function, where a sanity check on the last xattr entry is required. The actual...
PT-2021-27249
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.260 Description The issue concerns a problem in the f2fs setxattr function where it fails to perform a sanity check on the last xattr entry. This could potentially lead to security vulnerabilities, although...
PT-2021-27281
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.89 Description The issue concerns a lack of sanity check on the last xattr entry in the f2fs setxattr function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-27310
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.12 Description: The issue concerns a lack of sanity check on the last xattr entry in the f2fs setxattr function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...
Linux kernel has unspecified vulnerabilities (CNVD-2022-00608)
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.15.11 have a security vulnerability that stems from f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel, which can be exploited when an inode has an invalid last xattr...
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.15.11 have a security vulnerability that stems from f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel, which can be exploited when an inode has an invalid last xattr...
PT-2021-6205 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.15.11 Description: The issue arises from an out-of-bounds memory access in the f2fs setxattr function in fs/f2fs/xattr.c when an inode has an invalid last xattr entry. This can potentially impact the...
Exploit for Privilege Context Switching Error in Canonical Ubuntu_Linux
PoC exploit for CVE-2021-3493, a local privilege escalation vulnerability in Ubuntu OverlayFS. The target is the Linux kernel, specifically the overlayfs file system, which did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker coul...
Important: kernel-livepatch-4.14.177-139.253
Issue Overview: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4xattrsetentry use-after-free in fs/ext4/xattr.c when a large oldsize value is used in a memset call. CVE-2019-19319 Affected...
Important: kernel-livepatch-4.14.173-137.228
Issue Overview: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4xattrsetentry use-after-free in fs/ext4/xattr.c when a large oldsize value is used in a memset call. CVE-2019-19319 Affected...
USN-4391-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the ext4 file system implementation in the Linux kernel did not properly handle setxattr operations in some situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-19319 It was discovered that memory...
CVE-2016-7097
It was found that when file permissions were modified via chmod and the user modifying them was not in the owning group or capable of CAPFSETID, the setgid bit would be cleared. Setting a POSIX ACL via setxattr sets the file permissions as well as the new ACL, but doesn't clear the setgid bit in ...
DEBIAN-CVE-2019-19319
In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4xattrsetentry use-after-free in fs/ext4/xattr.c when a large oldsize value is used in a memset call, aka CID-345c0dbf3a30...