Linux Distros Unpatched Vulnerability : CVE-2025-68820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4rawinode If ext4getinodeloc fails e.g. if it...

Linux Distros Unpatched Vulnerability : CVE-2025-68784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchksetupxattrbuf function can allocate a new val...

K000159062: Linux kernel vulnerability CVE-2024-56627

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read in ksmbdvfsstreamread An offset from client could be a negative value, it could lead to an out-of-bounds read from the streambuf. Note that this issue is coming when...

K000159061: Linux kernel vulnerability CVE-2024-56626

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in ksmbdvfsstreamwrite. An offset from client could be a negative value, it could allows to write data outside the bounds of the allocated buffer. Note that this issue ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000468 advisory. The Linux kernel before 5.4.2 mishandles ext4expandextraisize, as demonstrated by use-after-free errors in ext4expandextraisize and ext4xattrsetentry, related to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000349 advisory. In f2fsxattrgenericlist of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000521 advisory. In f2fsxattrgenericlist of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000496 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate t...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992880 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of newea in eabuffer syzbot reports that lzo1x1docompress is using...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993213)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993213 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4xattrdeleteinode Syzbot reported a hung task problem:...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993057)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993057 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that the...

UBUNTU-CVE-2022-50845

In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode leak in ext4xattrinodecreate on an error path There is issue as follows when do setxattr with inject fault: localhost fsck.ext4 -fn /dev/sda e2fsck 1.46.6-rc1 12-Sep-2022 Pass 1: Checking inodes, blocks, and sizes...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992322 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4xattrdeleteinode Syzbot reported a hung task problem:...

PT-2025-53963

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to an inode leak within the ext4 xattr inode create function when handling errors during extended attribute operations. Specifically, if ext4...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ext4xattrinodecreate error path not freeing an inode, which could lead to an inode leak...

SUSE CVE-2023-54062

In the Linux kernel, the following vulnerability has been resolved: ext4: fix invalid free tracking in ext4xattrmovetoblock In ext4xattrmovetoblock, the value of the extended attribute which we need to move to an external block may be allocated by kvmalloc if the value is stored in an external...

Linux Distros Unpatched Vulnerability : CVE-2023-54062

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix invalid free tracking in ext4xattrmovetoblock In ext4xattrmovetoblock, the value of the extended attribute which we need to move to an external block...

EUVD-2023-60264

In the Linux kernel, the following vulnerability has been resolved: ext4: fix invalid free tracking in ext4xattrmovetoblock In ext4xattrmovetoblock, the value of the extended attribute which we need to move to an external block may be allocated by kvmalloc if the value is stored in an external...

UBUNTU-CVE-2023-54062

In the Linux kernel, the following vulnerability has been resolved: ext4: fix invalid free tracking in ext4xattrmovetoblock In ext4xattrmovetoblock, the value of the extended attribute which we need to move to an external block may be allocated by kvmalloc if the value is stored in an external...

CVE-2023-54062

The CVE-2023-54062 issue in the Linux kernel affects ext4_xattr_move_to_block(): the value of an extended attribute moved to an external block could be freed incorrectly (kvfree) or not freed, because the code checked entry->e_value_inum after the xattr entry had been removed. The root cause i...