CVE-2023-2640-CVE-2023-32629

GameOverlay Ubuntu 権限昇格 CVE-2023-2640 https://www.cvedetails.com/cve/CVE-2023-2640/ c914c0e27eb0 と「UBUNTU: SAUCE: overlayfs: trusted.overlayfs. xattrs の権限チェックをスキップ」の両方を搭載した Ubuntu カーネルでは、特権のないユーザーがマウントされたファイルに特権拡張属性を設定できる可能性があり、適切なセキュリティチェックなしに上位ファイルに設定される可能性があります。 CVE-2023-32629...

Ubuntu-GameOver-Lay

UbuntuP-GameOverLay Usando CVE-2023-2640 CVE-2023-3262 para escalar privilegios CVE 2023-2640 https://nvd.nist.gov/vuln/detail/CVE-2023-2640 En los kernels de Ubuntu que contienen tanto c914c0e27eb0 como "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", un usuari...

PT-2026-97955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the ext4 file system during the mount process when the system is not yet active !SB ACTIVE. The function ext4 try to expand extra isize is called from ext4 mark inod...

PT-2026-97939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular locking dependency exists in the OCFS2 file system within the ocfs2 init acl function. The issue occurs between the &oi-ip xattr sem and &journal-j trans barrier locks. A...

PT-2026-98012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the ksmbd module within the ksmbd vfs set sd xattr function. The ndr encode v4 ntacl function allocates memory for sd ndr.data using kzalloc. If a subsequent ndr...

Linux Distros Unpatched Vulnerability : CVE-2026-90320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr...

Linux Distros Unpatched Vulnerability : CVE-2026-92503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix ABBA deadlock in ext4xattrinodecachefind Syzbot/stress-ng reported an ABBA deadlock in ext4 when exercising concurrent xattr workloads using the eaino...

Linux Distros Unpatched Vulnerability : CVE-2026-90321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate inline xattrs during inode block validation Patch series ocfs2: validate xattr entry bounds, v7. This series validates OCFS2 xattr entry...

CVE-2026-92503

In the Linux kernel, the following vulnerability has been resolved: ext4: fix ABBA deadlock in ext4xattrinodecachefind Syzbot/stress-ng reported an ABBA deadlock in ext4 when exercising concurrent xattr workloads using the eainode mount/format option. The deadlock occurs between the running...

DEBIAN-CVE-2026-90320

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-90320

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

AZL-102764 CVE-2026-90320 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-92503

CVE-2026-92503 is an ABBA deadlock in the Linux kernel's ext4 filesystem, specifically in ext4_xattr_inode_cache_find(). The deadlock occurs between a running transaction holding a reference to a shared mbcache_entry and the eviction thread waiting for that reference to be released, when the exte...

EUVD-2026-81982

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate xattr entry bounds", v7. This series validates OCFS2 xattr entry name/value bounds when xattr metadata is read and validated, before getxat...

CVE-2026-90321 ocfs2: validate inline xattrs during inode block validation

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate xattr entry bounds", v7. This series validates OCFS2 xattr entry name/value bounds when xattr metadata is read and validated, before getxat...

CVE-2026-90321 ocfs2: validate inline xattrs during inode block validation

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate xattr entry bounds", v7. This series validates OCFS2 xattr entry name/value bounds when xattr metadata is read and validated, before getxat...

CVE-2026-90321

CVE-2026-90321 affects the Linux kernel's OCFS2 filesystem . The root cause is that ocfs2_validate_inode_block() did not validate inline extended-attribute (xattr) entry name/value bounds, allowing getxattr() or listxattr() to walk out-of-range entries from corrupted metadata , leading to a use-a...

CVE-2026-90320 ocfs2: validate external xattr entries when reading metadata

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-90320 ocfs2: validate external xattr entries when reading metadata

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2validatexattrblock checks the xattr block header before the block reaches higher-level xattr users, but it does not verify that a non-indexed block's xhcount and...

CVE-2026-90320

This Linux kernel vulnerability affects the ocfs2 filesystem 's handling of external extended attribute (xattr) metadata. The root cause is insufficient validation in ocfs2_validate_xattr_block(), which fails to verify that non-indexed block entry counts and offsets fit within the block, and that...