Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a reference to ab-value during xattr repair that could become a dangling pointer, potentially leading to reu...

Linux Distros Unpatched Vulnerability : CVE-2025-68820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4rawinode If ext4getinodeloc fails e.g. if it...

Linux Distros Unpatched Vulnerability : CVE-2025-68784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchksetupxattrbuf function can allocate a new val...

PT-2026-2552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ext4 implementation related to extended attribute handling. Specifically, a null pointer dereference can occur within the ext4 raw inode function if...

K000159062: Linux kernel vulnerability CVE-2024-56627

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read in ksmbdvfsstreamread An offset from client could be a negative value, it could lead to an out-of-bounds read from the streambuf. Note that this issue is coming when...

K000159061: Linux kernel vulnerability CVE-2024-56626

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in ksmbdvfsstreamwrite. An offset from client could be a negative value, it could allows to write data outside the bounds of the allocated buffer. Note that this issue ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000521 advisory. In f2fsxattrgenericlist of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000349 advisory. In f2fsxattrgenericlist of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000496 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000468 advisory. The Linux kernel before 5.4.2 mishandles ext4expandextraisize, as demonstrated by use-after-free errors in ext4expandextraisize and ext4xattrsetentry, related to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993057)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993057 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993213)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993213 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4xattrdeleteinode Syzbot reported a hung task problem:...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992880 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of newea in eabuffer syzbot reports that lzo1x1docompress is using...

UBUNTU-CVE-2022-50845

In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode leak in ext4xattrinodecreate on an error path There is issue as follows when do setxattr with inject fault: localhost fsck.ext4 -fn /dev/sda e2fsck 1.46.6-rc1 12-Sep-2022 Pass 1: Checking inodes, blocks, and sizes...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ext4xattrinodecreate error path not freeing an inode, which could lead to an inode leak...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992322 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4xattrdeleteinode Syzbot reported a hung task problem:...

PT-2025-53963

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to an inode leak within the ext4 xattr inode create function when handling errors during extended attribute operations. Specifically, if ext4...

SUSE CVE-2023-54062

In the Linux kernel, the following vulnerability has been resolved: ext4: fix invalid free tracking in ext4xattrmovetoblock In ext4xattrmovetoblock, the value of the extended attribute which we need to move to an external block may be allocated by kvmalloc if the value is stored in an external...

Linux Distros Unpatched Vulnerability : CVE-2023-54062

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix invalid free tracking in ext4xattrmovetoblock In ext4xattrmovetoblock, the value of the extended attribute which we need to move to an external block...

EUVD-2023-60264

In the Linux kernel, the following vulnerability has been resolved: ext4: fix invalid free tracking in ext4xattrmovetoblock In ext4xattrmovetoblock, the value of the extended attribute which we need to move to an external block may be allocated by kvmalloc if the value is stored in an external...