801 matches found
CVE-2025-40306
The CVE-2025-40306 issue is a kernel-level fix for orangefs xattr handling. The root cause was in the xattr_key() loop, which used the pointer variable in the loop condition instead of dereferencing it, causing the loop to continue past valid C strings and risk memory access issues. This led to a...
CVE-2025-40306 orangefs: fix xattr related buffer overflow...
In the Linux kernel, the following vulnerability has been resolved: orangefs: fix xattr related buffer overflow... Willy Tarreau forwarded me a message from Disclosure with the following warning: The helper xattrkey uses the pointer variable in the loop condition rather than dereferencing it. As...
Linux Distros Unpatched Vulnerability : CVE-2025-40306
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - orangefs: fix xattr related buffer overflow... Willy Tarreau forwarded me a message from Disclosure with the following warning: The helper xattrkey uses the...
PT-2025-49438
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the orangefs module related to extended attribute xattr handling. The xattr key helper function incorrectly uses a pointer variable in the loop...
The vulnerability of the vfs_streams_xattr module in the Samba networking software package allows a hacker to gain access to confidential information.
The vulnerability of the vfsstreamsxattr module in the Samba networking software package is related to reading data outside of the allowed range. Exploiting this vulnerability could allow an attacker to gain access to confidential information...
PT-2026-2516
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the xattr repair functionality. Specifically, the xchk setup xattr buf function can allocate a new value buffer, potentially leadi...
Debian dla-4384 : ctdb - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4384 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4384-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 4384-1] samba security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4384-1 [email protected] https://www.debian.org/lts/security/ Paride Legovini November 26, 2025 https://wiki.debian.org/LTS -...
ROS-20251124-07
Vulnerability of WINS name resolution server implementation of Samba networking software package exists due to failure to take measures to neutralize special elements. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code by sending a specially crafted request ...
TencentOS Server 2: kernel (TSSA-2025:0436)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0436 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...
TencentOS Server 3: kernel (TSSA-2025:0434)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0434 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
SUSE-SU-2025:21005-1 Security update for samba
This update for samba fixes the following issues: Update to 4.22.5: CVE-2025-10230: Command injection via WINS server hook script bsc1251280. CVE-2025-9640: uninitialized memory disclosure via vfsstreamsxattr bsc1251279. - Relax samba-gpupdate requirement for cepces, certmonger, and sscep to a...
SUSE CVE-2025-40190
In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...
DEBIAN-CVE-2025-40190
In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...
AZL-70091 CVE-2025-40190 affecting package kernel for versions less than 6.6.117.1-1
In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...
CVE-2025-40190 ext4: guard against EA inode refcount underflow in xattr update
In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...
CVE-2025-40190
In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990886)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990886 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that the...
kernel: ima: Fix a potential integer overflow in ima_appraise_measurement
In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...