Lucene search
+L

801 matches found

BDU FSTEC
BDU FSTEC
added 2025/06/02 12:00 a.m.11 views

The vulnerability of the `squashfs_read_xattr_id_table()` function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the squashfsreadxattridtable function in the Linux kernel is related to read errors outside of the allowed range. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.4AI score
SaveExploits0References13Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:00 a.m.11 views

The vulnerability of the cachefiles_set_volume_xattr() function in the fs/cachefiles/namei.c module of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the cachefilessetvolumexattr function in the fs/cachefiles/namei.c module of the Linux kernel is related to a memory overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00218EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:00 a.m.9 views

The vulnerability of the cachefiles_set_volume_xattr() function in the fs/cachefiles/xattr.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cachefilessetvolumexattr function in the fs/cachefiles/xattr.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7AI score0.00251EPSS
SaveExploits0References8Affected Software4
SUSE CVE
SUSE CVE
added 2025/05/03 2:50 a.m.6 views

SUSE CVE-2023-53089

In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4xattrdeleteinode Syzbot reported a hung task problem: ================================================================== INFO: task syz-executor232:5073 blocked for more than 143 seconds. Not tainted...

4.4CVSS6.2AI score0.00191EPSS
SaveExploits0References9
OSV
OSV
added 2025/05/02 4:15 p.m.2 views

DEBIAN-CVE-2023-53089

In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4xattrdeleteinode Syzbot reported a hung task problem: ================================================================== INFO: task syz-executor232:5073 blocked for more than 143 seconds. Not tainted...

5.5CVSS5.5AI score0.00191EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/02 4:15 p.m.7 views

UBUNTU-CVE-2023-53089

In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4xattrdeleteinode Syzbot reported a hung task problem: ================================================================== INFO: task syz-executor232:5073 blocked for more than 143 seconds. Not tainted...

5.5CVSS6.1AI score0.00191EPSS
SaveExploits0References11
CVE
CVE
added 2025/05/02 3:55 p.m.141 views

CVE-2023-53089

CVE-2023-53089 affects the Linux kernel ext4/xattr path. The issue occurs during eviction of inodes with extended attributes (EA) where ext4_xattr_delete_inode triggers a hang due to finding an EA inode (ea_inum = 15) that is in I_FREEING state and waiting for the EA inode’s deletion, causing an ...

5.5CVSS6.5AI score0.00191EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
added 2025/05/02 12:00 a.m.17 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ext4xattrdeleteinode causing a task to hang...

5.5CVSS6AI score0.00191EPSS
SaveExploits0References8
OSV
OSV
added 2025/05/01 1:15 p.m.10 views

DEBIAN-CVE-2025-37738

In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entries past the 'end' entry. This fixes the following KASAN reported issue:...

7.8CVSS5.6AI score0.00189EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/01 12:55 p.m.202 views

CVE-2025-37738

CVE-2025-37738 details from Connected docs show a Linux kernel ext4 vulnerability: ext4_xattr_inode_dec_ref_all may read past the end while processing xattrs, leading to a slab-use-after-free as reported by KASAN. The fix makes ext4_xattr handling ignore xattrs entries beyond the end, preventing ...

7.8CVSS6AI score0.00189EPSS
SaveExploits0References11Affected Software1
SUSE CVE
SUSE CVE
added 2025/04/24 9:49 a.m.6 views

SUSE CVE-2025-22121

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4xattrinodedecrefall There's issue as follows: BUG: KASAN: use-after-free in ext4xattrinodedecrefall+0x6ff/0x790 Read of size 4 at addr ffff88807b003000 by task syz-executor.0/15172 CPU: 3 PID:...

5.5CVSS7.7AI score0.00189EPSS
SaveExploits0References17
OSV
OSV
added 2025/04/18 7:15 a.m.14 views

DEBIAN-CVE-2025-39735

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in eaget During the "sizecheck" label in eaget, the code checks if the extended attribute list xattr size matches easize. If not, it logs "eaget: invalid extended attribute" and calls printhexdump...

7.1CVSS6AI score0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/18 7:01 a.m.3 views

CVE-2025-39735 jfs: fix slab-out-of-bounds read in ea_get()

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in eaget During the "sizecheck" label in eaget, the code checks if the extended attribute list xattr size matches easize. If not, it logs "eaget: invalid extended attribute" and calls printhexdump...

7.1CVSS7.6AI score0.00281EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2025/04/18 7:01 a.m.29 views

CVE-2025-39735 jfs: fix slab-out-of-bounds read in ea_get()

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in eaget During the "sizecheck" label in eaget, the code checks if the extended attribute list xattr size matches easize. If not, it logs "eaget: invalid extended attribute" and calls printhexdump...

7.1CVSS0.00281EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2025/04/18 12:00 a.m.12 views

The vulnerability of the ocfs2_reflink_xattrInline() function in the cluster file system ocfs2 of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ocfs2reflinkxattrInline function in the cluster file system ocfs2 of the Linux operating system is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS6.7AI score0.00273EPSS
SaveExploits0References18Affected Software9
OSV
OSV
added 2025/04/16 3:16 p.m.6 views

AZL-62660 CVE-2025-22121 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4xattrinodedecrefall There's issue as follows: BUG: KASAN: use-after-free in ext4xattrinodedecrefall+0x6ff/0x790 Read of size 4 at addr ffff88807b003000 by task syz-executor.0/15172 CPU: 3 PID:...

8.4CVSS6.8AI score0.00189EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/16 3:16 p.m.30 views

CVE-2025-22121

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4xattrinodedecrefall There's issue as follows: BUG: KASAN: use-after-free in ext4xattrinodedecrefall+0x6ff/0x790 Read of size 4 at addr ffff88807b003000 by task syz-executor.0/15172 CPU: 3 PID:...

8.4CVSS0.00189EPSS
SaveExploits0References8
OSV
OSV
added 2025/04/16 3:16 p.m.9 views

AZL-69608 CVE-2025-22121 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4xattrinodedecrefall There's issue as follows: BUG: KASAN: use-after-free in ext4xattrinodedecrefall+0x6ff/0x790 Read of size 4 at addr ffff88807b003000 by task syz-executor.0/15172 CPU: 3 PID:...

8.4CVSS6.8AI score0.00189EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/16 3:16 p.m.7 views

CVE-2025-22121

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4xattrinodedecrefall There's issue as follows: BUG: KASAN: use-after-free in ext4xattrinodedecrefall+0x6ff/0x790 Read of size 4 at addr ffff88807b003000 by task syz-executor.0/15172 CPU: 3 PID:...

7.1CVSS6.4AI score0.00189EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds read problem in the ext4xattrinodedecrefall function...

7.1CVSS6.6AI score0.00189EPSS
SaveExploits0References2
Rows per page
Query Builder