Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 28

Количество 28

ubuntu логотип

CVE-2024-42077

больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2_dio_end_io_write() estimates number of necessary transaction credits using ocfs2_calc_extend_credits(). This however does not take into account that the IO could be arbitrarily large and can contain arbitrary number of extents. Extent tree manipulations do often extend the current transaction but not in all of the cases. For example if we have only single block extents in the tree, ocfs2_mark_extent_written() will end up calling ocfs2_replace_extent_rec() all the time and we will never extend the current transaction and eventually exhaust all the transaction credits if the IO contains many single block extents. Once that happens a WARN_ON(jbd2_handle_buffer_credits(handle) <= 0) is triggered in jbd2_journal_dirty_metadata() and subsequently OCFS2 aborts in response to this error. This was actually triggered by one of our customers o...

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2024-42077

больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2_dio_end_io_write() estimates number of necessary transaction credits using ocfs2_calc_extend_credits(). This however does not take into account that the IO could be arbitrarily large and can contain arbitrary number of extents. Extent tree manipulations do often extend the current transaction but not in all of the cases. For example if we have only single block extents in the tree, ocfs2_mark_extent_written() will end up calling ocfs2_replace_extent_rec() all the time and we will never extend the current transaction and eventually exhaust all the transaction credits if the IO contains many single block extents. Once that happens a WARN_ON(jbd2_handle_buffer_credits(handle) <= 0) is triggered in jbd2_journal_dirty_metadata() and subsequently OCFS2 aborts in response to this error. This was actually triggered by one of our customers o...

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2024-42077

больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2_dio_end_io_write() estimates number of necessary transaction credits using ocfs2_calc_extend_credits(). This however does not take into account that the IO could be arbitrarily large and can contain arbitrary number of extents. Extent tree manipulations do often extend the current transaction but not in all of the cases. For example if we have only single block extents in the tree, ocfs2_mark_extent_written() will end up calling ocfs2_replace_extent_rec() all the time and we will never extend the current transaction and eventually exhaust all the transaction credits if the IO contains many single block extents. Once that happens a WARN_ON(jbd2_handle_buffer_credits(handle) <= 0) is triggered in jbd2_journal_dirty_metadata() and subsequently OCFS2 aborts in response to this error. This was actually triggered by one of our customers o

CVSS3: 5.5
EPSS: Низкий
msrc логотип

CVE-2024-42077

около 2 лет назад

ocfs2: fix DIO failure due to insufficient transaction credits

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2024-42077

больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: o ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-cfqx-qcxx-3hwg

больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2_dio_end_io_write() estimates number of necessary transaction credits using ocfs2_calc_extend_credits(). This however does not take into account that the IO could be arbitrarily large and can contain arbitrary number of extents. Extent tree manipulations do often extend the current transaction but not in all of the cases. For example if we have only single block extents in the tree, ocfs2_mark_extent_written() will end up calling ocfs2_replace_extent_rec() all the time and we will never extend the current transaction and eventually exhaust all the transaction credits if the IO contains many single block extents. Once that happens a WARN_ON(jbd2_handle_buffer_credits(handle) <= 0) is triggered in jbd2_journal_dirty_metadata() and subsequently OCFS2 aborts in response to this error. This was actually triggered by one of our customer...

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2025-02552

больше 2 лет назад

Уязвимость функций ocfs2_extend_trans() и ocfs2_dio_end_io_write() кластерной файловой системы OCFS2 ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
EPSS: Низкий
altlinux логотип

ALT-PU-2016-1634

больше 10 лет назад

ALT-PU-2016-1634: package `kernel-image-un-def` update to version 4.6.2-alt1

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3499-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
redos логотип

ROS-20250123-01

почти 2 года назад

Множественные уязвимости kernel-lt

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3249-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3408-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3189-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3252-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3251-1

около 2 лет назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2024-18061

больше 2 лет назад

ALT-PU-2024-18061: package `kernel-image-un-def` update to version 6.1.99-alt1

CVSS3: 7.8
EPSS: Низкий
oracle-oval логотип

ELSA-2024-12618

около 2 лет назад

ELSA-2024-12618: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2024-10855

больше 2 лет назад

ALT-PU-2024-10855: package `kernel-image-pine` update to version 6.10.3-alt2

CVSS3: 8.1
EPSS: Низкий
altlinux логотип

ALT-PU-2024-9967

больше 2 лет назад

ALT-PU-2024-9967: package `kernel-image-std-def` update to version 5.10.221-alt1

CVSS3: 8.8
EPSS: Низкий
altlinux логотип

ALT-PU-2024-9973

больше 2 лет назад

ALT-PU-2024-9973: package `kernel-image-rt` update to version 5.10.221-alt1.rt113

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-42077

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2_dio_end_io_write() estimates number of necessary transaction credits using ocfs2_calc_extend_credits(). This however does not take into account that the IO could be arbitrarily large and can contain arbitrary number of extents. Extent tree manipulations do often extend the current transaction but not in all of the cases. For example if we have only single block extents in the tree, ocfs2_mark_extent_written() will end up calling ocfs2_replace_extent_rec() all the time and we will never extend the current transaction and eventually exhaust all the transaction credits if the IO contains many single block extents. Once that happens a WARN_ON(jbd2_handle_buffer_credits(handle) <= 0) is triggered in jbd2_journal_dirty_metadata() and subsequently OCFS2 aborts in response to this error. This was actually triggered by one of our customers o...

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
redhat логотип
CVE-2024-42077

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2_dio_end_io_write() estimates number of necessary transaction credits using ocfs2_calc_extend_credits(). This however does not take into account that the IO could be arbitrarily large and can contain arbitrary number of extents. Extent tree manipulations do often extend the current transaction but not in all of the cases. For example if we have only single block extents in the tree, ocfs2_mark_extent_written() will end up calling ocfs2_replace_extent_rec() all the time and we will never extend the current transaction and eventually exhaust all the transaction credits if the IO contains many single block extents. Once that happens a WARN_ON(jbd2_handle_buffer_credits(handle) <= 0) is triggered in jbd2_journal_dirty_metadata() and subsequently OCFS2 aborts in response to this error. This was actually triggered by one of our customers o...

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2024-42077

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2_dio_end_io_write() estimates number of necessary transaction credits using ocfs2_calc_extend_credits(). This however does not take into account that the IO could be arbitrarily large and can contain arbitrary number of extents. Extent tree manipulations do often extend the current transaction but not in all of the cases. For example if we have only single block extents in the tree, ocfs2_mark_extent_written() will end up calling ocfs2_replace_extent_rec() all the time and we will never extend the current transaction and eventually exhaust all the transaction credits if the IO contains many single block extents. Once that happens a WARN_ON(jbd2_handle_buffer_credits(handle) <= 0) is triggered in jbd2_journal_dirty_metadata() and subsequently OCFS2 aborts in response to this error. This was actually triggered by one of our customers o

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
msrc логотип
CVE-2024-42077

ocfs2: fix DIO failure due to insufficient transaction credits

CVSS3: 5.5
0%
Низкий
около 2 лет назад
debian логотип
CVE-2024-42077

In the Linux kernel, the following vulnerability has been resolved: o ...

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
github логотип
GHSA-cfqx-qcxx-3hwg

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix DIO failure due to insufficient transaction credits The code in ocfs2_dio_end_io_write() estimates number of necessary transaction credits using ocfs2_calc_extend_credits(). This however does not take into account that the IO could be arbitrarily large and can contain arbitrary number of extents. Extent tree manipulations do often extend the current transaction but not in all of the cases. For example if we have only single block extents in the tree, ocfs2_mark_extent_written() will end up calling ocfs2_replace_extent_rec() all the time and we will never extend the current transaction and eventually exhaust all the transaction credits if the IO contains many single block extents. Once that happens a WARN_ON(jbd2_handle_buffer_credits(handle) <= 0) is triggered in jbd2_journal_dirty_metadata() and subsequently OCFS2 aborts in response to this error. This was actually triggered by one of our customer...

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
fstec логотип
BDU:2025-02552

Уязвимость функций ocfs2_extend_trans() и ocfs2_dio_end_io_write() кластерной файловой системы OCFS2 ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
0%
Низкий
больше 2 лет назад
altlinux логотип
ALT-PU-2016-1634

ALT-PU-2016-1634: package `kernel-image-un-def` update to version 4.6.2-alt1

CVSS3: 7.8
больше 10 лет назад
suse-cvrf логотип
SUSE-SU-2024:3499-1

Security update for the Linux Kernel

около 2 лет назад
redos логотип
ROS-20250123-01

Множественные уязвимости kernel-lt

CVSS3: 7.8
почти 2 года назад
suse-cvrf логотип
SUSE-SU-2024:3249-1

Security update for the Linux Kernel

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:3408-1

Security update for the Linux Kernel

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:3189-1

Security update for the Linux Kernel

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:3252-1

Security update for the Linux Kernel

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:3251-1

Security update for the Linux Kernel

около 2 лет назад
altlinux логотип
ALT-PU-2024-18061

ALT-PU-2024-18061: package `kernel-image-un-def` update to version 6.1.99-alt1

CVSS3: 7.8
больше 2 лет назад
oracle-oval логотип
ELSA-2024-12618

ELSA-2024-12618: Unbreakable Enterprise kernel security update (IMPORTANT)

около 2 лет назад
altlinux логотип
ALT-PU-2024-10855

ALT-PU-2024-10855: package `kernel-image-pine` update to version 6.10.3-alt2

CVSS3: 8.1
больше 2 лет назад
altlinux логотип
ALT-PU-2024-9967

ALT-PU-2024-9967: package `kernel-image-std-def` update to version 5.10.221-alt1

CVSS3: 8.8
больше 2 лет назад
altlinux логотип
ALT-PU-2024-9973

ALT-PU-2024-9973: package `kernel-image-rt` update to version 5.10.221-alt1.rt113

CVSS3: 8.8
больше 2 лет назад

Уязвимостей на страницу