DEBIAN-CVE-2026-93055

In the Linux kernel, the following vulnerability has been resolved: UDF symlink pathComponent header OOB read udfsymlinkfiller can enter udfpctochar with a partial pathComponent header. Validate that enough input remains for a complete pathComponent header before accessing it. Reject malformed...

CVE-2026-93055

CVE-2026-93055 affects the Linux kernel's UDF filesystem implementation. The vulnerability is an out-of-bounds (OOB) read in the handling of UDF symlinks: udf_symlink_filler() can pass a partial pathComponent header to udf_pc_to_char(), which then reads beyond the available input. The fix validat...

EUVD-2026-82165

In the Linux kernel, the following vulnerability has been resolved: UDF symlink pathComponent header OOB read udfsymlinkfiller can enter udfpctochar with a partial pathComponent header. Validate that enough input remains for a complete pathComponent header before accessing it. Reject malformed...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000750)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000750 advisory. The udfpctochar function in fs/udf/symlink.c in the Linux kernel before 3.18.2 relies on component lengths that are unused, which allows local users to cause a denia...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002339 advisory. The udfpctochar function in fs/udf/symlink.c in the Linux kernel before 3.18.2 relies on component lengths that are unused, which allows local users to cause a denia...

CVE-2014-9730

The udfpctochar function in fs/udf/symlink.c in the Linux kernel before 3.18.2 relies on component lengths that are unused, which allows local users to cause a denial of service system crash via a crafted UDF filesystem image...

CVE-2014-9730

CVE-2014-9730 affects the Linux kernel’s UDF support. The function udf_pc_to_char in fs/udf/symlink.c relies on unused component lengths, enabling a local attacker to trigger a denial of service (system crash) by mounting a crafted UDF image. The vulnerability is fixed in kernel 3.18.2 (see Chang...