Lucene search
+L

774 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/24 12:0 a.m.7 views

The vulnerability of the ea_get() function in the fs/jfs/xattr.c module of the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the eaget function in the fs/jfs/xattr.c module of the Linux kernel relates to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

7.1CVSS7.2AI score0.0028EPSS
SaveExploits0References28Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/03/21 12:0 a.m.8 views

The vulnerability of the ext4_xattr_set_entry() function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4xattrsetentry function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to insufficient resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.5CVSS6.6AI score0.00221EPSS
SaveExploits0References14Affected Software5
Positive Technologies
Positive Technologies
added 2025/03/18 12:0 a.m.12 views

PT-2025-16761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bound read in the ext4 xattr inode dec ref all function. This occurs due to a use-after-free error, as indicated by the KASAN report. The problem arises...

7.1CVSS6.7AI score0.00177EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/03/17 12:0 a.m.4 views

PT-2025-18419

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc2+ Description A slab-use-after-free bug has been identified in the Linux kernel, specifically in the ext4 file system. The issue arises when the kernel fails to ignore extended attributes past the 'end'...

7.8CVSS6.5AI score0.00177EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/03/05 2:49 a.m.6 views

kernel: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()

In the Linux kernel, the following vulnerability has been resolved: ext4: fix mbcacheentry's erefcnt leak in ext4xattrblockcachefind Syzbot reports a warning as follows: ============================================ WARNING: CPU: 0 PID: 5075 at fs/mbcache.c:419 mbcachedestroy+0x224/0x290 Modules...

5.5CVSS6.8AI score0.00233EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/02/27 3:14 a.m.5 views

SUSE CVE-2021-47656

In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2clearxattrsubsystem When we mount a jffs2 image, assume that the first few blocks of the image are normal and contain at least one xattr-related inode, but the next block is abnormal. As a result...

6.7CVSS6.5AI score0.00253EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/02/27 3:12 a.m.2 views

SUSE CVE-2022-49062

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix KASAN slab-out-of-bounds in cachefilessetvolumexattr Use the actual length of volume coherency data when setting the xattr to avoid the following KASAN report. BUG: KASAN: slab-out-of-bounds in...

5.5CVSS6.7AI score0.00251EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/02/27 3:3 a.m.5 views

SUSE CVE-2022-49643

In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...

5.5CVSS7.7AI score0.00263EPSS
SaveExploits0References10
OSV
OSV
added 2025/02/26 7:1 a.m.3 views

DEBIAN-CVE-2022-49643

In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...

5.5CVSS5.6AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/26 6:37 a.m.14 views

CVE-2021-47656

In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2clearxattrsubsystem When we mount a jffs2 image, assume that the first few blocks of the image are normal and contain at least one xattr-related inode, but the next block is abnormal. As a result...

7.8CVSS0.00253EPSS
SaveExploits0References9
OSV
OSV
added 2025/02/26 6:37 a.m.5 views

DEBIAN-CVE-2021-47656

In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2clearxattrsubsystem When we mount a jffs2 image, assume that the first few blocks of the image are normal and contain at least one xattr-related inode, but the next block is abnormal. As a result...

7.8CVSS5.7AI score0.00253EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 6:37 a.m.8 views

UBUNTU-CVE-2021-47656

In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2clearxattrsubsystem When we mount a jffs2 image, assume that the first few blocks of the image are normal and contain at least one xattr-related inode, but the next block is abnormal. As a result...

7.8CVSS6.2AI score0.00253EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2025/02/26 1:54 a.m.3 views

CVE-2022-49062 cachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattr

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix KASAN slab-out-of-bounds in cachefilessetvolumexattr Use the actual length of volume coherency data when setting the xattr to avoid the following KASAN report. BUG: KASAN: slab-out-of-bounds in...

6.2AI score0.00251EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/26 1:54 a.m.6 views

CVE-2021-47656 jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2clearxattrsubsystem When we mount a jffs2 image, assume that the first few blocks of the image are normal and contain at least one xattr-related inode, but the next block is abnormal. As a result...

7.5AI score0.00253EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2025/02/26 1:54 a.m.15 views

CVE-2021-47656

In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2clearxattrsubsystem When we mount a jffs2 image, assume that the first few blocks of the image are normal and contain at least one xattr-related inode, but the next block is abnormal. As a result...

7.8CVSS5.7AI score0.00253EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/02/26 1:54 a.m.17 views

CVE-2021-47656 jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2clearxattrsubsystem When we mount a jffs2 image, assume that the first few blocks of the image are normal and contain at least one xattr-related inode, but the next block is abnormal. As a result...

0.00253EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from post-release reuse in the jffs2clearxattrsubsystem function...

7.8CVSS5.6AI score0.00253EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from cachefilessetvolumexattr not properly using the actual length of the volume consistency data, which could le...

7.8CVSS5.5AI score0.00251EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.5 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: jffs2: Prevent the xattr node from overflowing the eraseblock. A check has been added to ensure that the requested xattr node size is not larger than the eraseblock minus the cleanmarker. Unlike traditional inode nodes, xattr...

7.1CVSS6.4AI score0.00245EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: A strict bound check was performed before using memcmp in ocfs2xattrfindEntry. The xattr function in ocfs2 might be “non-indexed”, which requires additional space for storage. It’s better to check whether the memory is out...

5.5CVSS6.2AI score0.00239EPSS
SaveExploits0References3
Rows per page
Query Builder