CVE-2023-2640-CVE-2023-32629

GameOverlay Ubuntu 권한 상승 CVE-2023-2640 https://www.cvedetails.com/cve/CVE-2023-2640/ c914c0e27eb0과 "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs"를 모두 포함하는 Ubuntu 커널에서, 권한이 없는 사용자가 마운트된 파일에 권한 있는 확장 속성을 설정할 수 있으며, 이로 인해 적절한 보안 검사 없이 상위 파일에 설정됩니다. CVE-2023-32629...

Ubuntu-GameOver-Lay

UbuntuP-GameOverLay CVE-2023-2640 및 CVE-2023-3262를 사용하여 권한 상승 CVE 2023-2640 https://nvd.nist.gov/vuln/detail/CVE-2023-2640 c914c0e27eb0과 "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs"를 모두 포함하는 Ubuntu 커널에서, 권한 없는 사용자가 마운트된 파일에 특권 확장 속성을 설정할 수 있으며, 이로 인해 적절한 보안 검...

CLEANSTART-2026-RQ35898 set_file_metadata in xattr

Security vulnerability affects the wget package. setfilemetadata in xattr...

PT-2026-97955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the ext4 file system during the mount process when the system is not yet active !SB ACTIVE. The function ext4 try to expand extra isize is called from ext4 mark inod...

PT-2026-97939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular locking dependency exists in the OCFS2 file system within the ocfs2 init acl function. The issue occurs between the &oi-ip xattr sem and &journal-j trans barrier locks. A...

PT-2026-98012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the ksmbd module within the ksmbd vfs set sd xattr function. The ndr encode v4 ntacl function allocates memory for sd ndr.data using kzalloc. If a subsequent ndr...

Linux Distros Unpatched Vulnerability : CVE-2026-92503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix ABBA deadlock in ext4xattrinodecachefind Syzbot/stress-ng reported an ABBA deadlock in ext4 when exercising concurrent xattr workloads using the eaino...

Linux Distros Unpatched Vulnerability : CVE-2026-90320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr...

Linux Distros Unpatched Vulnerability : CVE-2026-90321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate inline xattrs during inode block validation Patch series ocfs2: validate xattr entry bounds, v7. This series validates OCFS2 xattr entry...

CVE-2026-92503

In the Linux kernel, the following vulnerability has been resolved: ext4: fix ABBA deadlock in ext4xattrinodecachefind Syzbot/stress-ng reported an ABBA deadlock in ext4 when exercising concurrent xattr workloads using the eainode mount/format option. The deadlock occurs between the running...

DEBIAN-CVE-2026-90320

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-90320

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

AZL-102764 CVE-2026-90320 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-92503

CVE-2026-92503 is an ABBA deadlock in the Linux kernel's ext4 filesystem, specifically in ext4_xattr_inode_cache_find(). The deadlock occurs between a running transaction holding a reference to a shared mbcache_entry and the eviction thread waiting for that reference to be released, when the exte...

EUVD-2026-81982

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate xattr entry bounds", v7. This series validates OCFS2 xattr entry name/value bounds when xattr metadata is read and validated, before getxat...

CVE-2026-90321 ocfs2: validate inline xattrs during inode block validation

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate xattr entry bounds", v7. This series validates OCFS2 xattr entry name/value bounds when xattr metadata is read and validated, before getxat...

CVE-2026-90321 ocfs2: validate inline xattrs during inode block validation

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate xattr entry bounds", v7. This series validates OCFS2 xattr entry name/value bounds when xattr metadata is read and validated, before getxat...

CVE-2026-90321

CVE-2026-90321 affects the Linux kernel's OCFS2 filesystem . The root cause is that ocfs2_validate_inode_block() did not validate inline extended-attribute (xattr) entry name/value bounds, allowing getxattr() or listxattr() to walk out-of-range entries from corrupted metadata , leading to a use-a...

CVE-2026-90320 ocfs2: validate external xattr entries when reading metadata

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-90320 ocfs2: validate external xattr entries when reading metadata

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...