Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: orangefs: fixed xattr-related buffer overflow issues… Willy Tarreau forwarded me a message from Disclosure , containing the following warning: The helper function xattrkey uses the pointer variable in the loop condition, rather...

CVE-2025-40306

CVE-2025-40306 concerns the Linux kernel/orangefs xattr handling. The vulnerability arises from the xattr_key() helper using the pointer variable in the loop condition instead of dereferencing it, causing the loop to continue past valid C strings and potentially walk memory indefinitely. This led...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from cachefilessetvolumexattr not properly using the actual length of the volume consistency data, which could le...