Lucene search
+L

307 matches found

Cvelist
Cvelist
added 2026/08/15 5:52 a.m.25 views

CVE-2026-72097 dm-verity: fix a possible NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereference Fix a possible NULL pointer dereference dmverityloadpinisbdevtrusted if the device has no table...

0.00205EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/15 5:52 a.m.37 views

CVE-2026-72097

CVE-2026-72097 involves the Linux kernel, fixing a possible NULL pointer dereference in dm-verity, occurring in dm_verity_loadpin_is_bdev_trusted when a device has no table. The document set does not provide exploitation details; it simply notes the fix. Patches are referenced in kernel.org commi...

5.2AI score0.00205EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/15 5:52 a.m.15 views

EUVD-2026-59054

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...

5.3AI score0.00211EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/15 5:52 a.m.18 views

CVE-2026-72096 dm-verity: make error counter atomic

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...

5.4AI score
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.17 views

PT-2026-72285

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corrupted errs" was not atomic, thus it could be subject to race conditions. The call to dm audit log target"max-corrupted-errors" may be skipped due to the races...

5.3AI score0.00211EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.18 views

PT-2026-72287

In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if neras && neras fec-roots fio-erasuresneras++ = i; This allows neras to reach roots + 1 the post-increment pushes it past roots. This...

5.8AI score0.00664EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/15 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-72098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if neras && neras fec-roots fio-erasuresneras++ = i; This allows...

9.8CVSS6.1AI score0.00664EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.17 views

PT-2026-72286

In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereference Fix a possible NULL pointer dereference dm verity loadpin is bdev trusted if the device has no table...

5.2AI score0.00205EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/15 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-72096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: make error counter atomic The error counter v-corruptederrs was not atomic, thus it could be subject to race conditions. The call to...

5.8AI score0.00211EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/06/27 12:00 a.m.11 views

The vulnerability of the verity_fec_decode() function in the drivers/md/dm-verity-fec.c file of the device driver for multiple Linux device types (RAID and LVM), allowing a hacker to cause a service failure.

The vulnerability of the verityfecdecode function in the drivers/md/dm-verity-fec.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

5.5CVSS5.8AI score0.00354EPSS
SaveExploits0References11Affected Software3
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.12 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: dm-verity: properly handling failures of dmbufioclientcreate If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is called later with an ERRPTR argument. This causes a crash. Fix this...

5.5CVSS5.3AI score0.00128EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.11 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: The issue of reading parity bytes that are split across blocks has been fixed. The fecDecodeBufs function assumes that the parity bytes of the first RS codeword it decodes are never split across parity blocks. This...

7.1CVSS5.8AI score0.00124EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/05/29 1:16 a.m.21 views

SUSE CVE-2026-46130

In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split across blocks take 3 fecdecodebufs assumes that the parity bytes of the first RS codeword it decodes are never split across parity blocks. This assumption is false. Consider...

5.5CVSS5.8AI score0.00124EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/05/29 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-46130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity-fec: fix reading parity bytes split across blocks take 3 fecdecodebufs assumes that the parity bytes of the first RS codeword it decodes are never spl...

7.1CVSS6AI score0.00124EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/05/28 7:50 p.m.17 views

CVE-2026-46130

A flaw was found in the Linux kernel's device-mapper verity forward error correction dm-verity-fec component. This vulnerability occurs because a function responsible for decoding parity data makes an incorrect assumption about how these data blocks are read. Under specific, non-default...

7.1CVSS5.8AI score0.00124EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/28 10:16 a.m.19 views

CVE-2026-46130

In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split across blocks take 3 fecdecodebufs assumes that the parity bytes of the first RS codeword it decodes are never split across parity blocks. This assumption is false. Consider...

7.1CVSS0.00124EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/28 10:16 a.m.8 views

AZL-88935 CVE-2026-46130 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split across blocks take 3 fecdecodebufs assumes that the parity bytes of the first RS codeword it decodes are never split across parity blocks. This assumption is false. Consider...

7.1CVSS5.9AI score0.00124EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/05/28 10:16 a.m.12 views

CVE-2026-46130

In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split across blocks take 3 fecdecodebufs assumes that the parity bytes of the first RS codeword it decodes are never split across parity blocks. This assumption is false. Consider...

7.1CVSS5.5AI score0.00124EPSS
SaveExploits0References13
OSV
OSV
added 2026/05/28 10:16 a.m.16 views

UBUNTU-CVE-2026-46130

In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split across blocks take 3 fecdecodebufs assumes that the parity bytes of the first RS codeword it decodes are never split across parity blocks. This assumption is false. Consider...

7.1CVSS5.8AI score0.00124EPSS
SaveExploits0References14
CVE
CVE
added 2026/05/28 9:35 a.m.66 views

CVE-2026-46130

CVE-2026-46130 concerns the Linux kernel’s dm-verity-fec component. The root cause is an incorrect assumption about parity data layout: when reading parity bytes across blocks, parity bytes for the first RS codeword can be split across parity blocks, causing an out-of-bounds read under certain no...

7.1CVSS5.8AI score0.00124EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder