Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: orangefs: fixed xattr-related buffer overflow issues… Willy Tarreau forwarded me a message from Disclosure , containing the following warning: The helper function xattrkey uses the pointer variable in the loop condition, rather...

CVE-2025-40306

The CVE-2025-40306 issue is a kernel-level fix for orangefs xattr handling. The root cause was in the xattr_key() loop, which used the pointer variable in the loop condition instead of dereferencing it, causing the loop to continue past valid C strings and risk memory access issues. This led to a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from cachefilessetvolumexattr not properly using the actual length of the volume consistency data, which could le...