Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 29

Количество 29

ubuntu логотип

CVE-2025-38691

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree_prepare_commit() reallocates a larger buffer to retry encoding extents, the "layoutupdate_pages" page array is initialized only after the retry loop. But ext_tree_free_commitdata() is called on every iteration and tries to put pages in the array, thus dereferencing uninitialized pointers. An additional problem is that there is no limit on the maximum possible buffer_size. When there are too many extents, the client may create a layoutcommit that is larger than the maximum possible RPC size accepted by the server. During testing, we observed two typical scenarios. First, one memory page for extents is enough when we work with small files, append data to the end of the file, or preallocate extents before writing. But when we fill a new large file without preallocating, the number of extents...

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2025-38691

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree_prepare_commit() reallocates a larger buffer to retry encoding extents, the "layoutupdate_pages" page array is initialized only after the retry loop. But ext_tree_free_commitdata() is called on every iteration and tries to put pages in the array, thus dereferencing uninitialized pointers. An additional problem is that there is no limit on the maximum possible buffer_size. When there are too many extents, the client may create a layoutcommit that is larger than the maximum possible RPC size accepted by the server. During testing, we observed two typical scenarios. First, one memory page for extents is enough when we work with small files, append data to the end of the file, or preallocate extents before writing. But when we fill a new large file without preallocating, the number of extents...

CVSS3: 6.2
EPSS: Низкий
nvd логотип

CVE-2025-38691

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree_prepare_commit() reallocates a larger buffer to retry encoding extents, the "layoutupdate_pages" page array is initialized only after the retry loop. But ext_tree_free_commitdata() is called on every iteration and tries to put pages in the array, thus dereferencing uninitialized pointers. An additional problem is that there is no limit on the maximum possible buffer_size. When there are too many extents, the client may create a layoutcommit that is larger than the maximum possible RPC size accepted by the server. During testing, we observed two typical scenarios. First, one memory page for extents is enough when we work with small files, append data to the end of the file, or preallocate extents before writing. But when we fill a new large file without preallocating, the number of extent

CVSS3: 5.5
EPSS: Низкий
msrc логотип

CVE-2025-38691

10 месяцев назад

pNFS: Fix uninited ptr deref in block/scsi layout

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2025-38691

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: p ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-94hx-q75x-2q84

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree_prepare_commit() reallocates a larger buffer to retry encoding extents, the "layoutupdate_pages" page array is initialized only after the retry loop. But ext_tree_free_commitdata() is called on every iteration and tries to put pages in the array, thus dereferencing uninitialized pointers. An additional problem is that there is no limit on the maximum possible buffer_size. When there are too many extents, the client may create a layoutcommit that is larger than the maximum possible RPC size accepted by the server. During testing, we observed two typical scenarios. First, one memory page for extents is enough when we work with small files, append data to the end of the file, or preallocate extents before writing. But when we fill a new large file without preallocating, the number of ext...

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2025-15025

больше 1 года назад

Уязвимость компонента blocklayout/extent_tree.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20260403-80-0034

7 месяцев назад

Уязвимость kernel-lt

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20260403-73-0028

7 месяцев назад

Уязвимость kernel-lt

CVSS3: 5.5
EPSS: Низкий
oracle-oval логотип

ELSA-2025-20662

около 1 года назад

ELSA-2025-20662: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-25757

12 месяцев назад

ELSA-2025-25757: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:4189-1

12 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
oracle-oval логотип

ELSA-2025-20663

около 1 года назад

ELSA-2025-20663: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2025-16619

около 1 года назад

ALT-PU-2025-16619: package `kernel-image-rt` update to version 5.10.241-alt1.rt135

CVSS3: 8.1
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16606

около 1 года назад

ALT-PU-2025-16606: package `kernel-image-std-def` update to version 5.10.241-alt1

CVSS3: 8.1
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16600

около 1 года назад

ALT-PU-2025-16600: package `kernel-image-un-def` update to version 6.1.151-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16510

около 1 года назад

ALT-PU-2025-16510: package `kernel-image-6.12` update to version 6.12.45-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16465

около 1 года назад

ALT-PU-2025-16465: package `kernel-image-rt` update to version 6.12.45-alt1

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3751-1

около 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03600-1

около 1 года назад

Security update for the Linux Kernel

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-38691

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree_prepare_commit() reallocates a larger buffer to retry encoding extents, the "layoutupdate_pages" page array is initialized only after the retry loop. But ext_tree_free_commitdata() is called on every iteration and tries to put pages in the array, thus dereferencing uninitialized pointers. An additional problem is that there is no limit on the maximum possible buffer_size. When there are too many extents, the client may create a layoutcommit that is larger than the maximum possible RPC size accepted by the server. During testing, we observed two typical scenarios. First, one memory page for extents is enough when we work with small files, append data to the end of the file, or preallocate extents before writing. But when we fill a new large file without preallocating, the number of extents...

CVSS3: 5.5
0%
Низкий
около 1 года назад
redhat логотип
CVE-2025-38691

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree_prepare_commit() reallocates a larger buffer to retry encoding extents, the "layoutupdate_pages" page array is initialized only after the retry loop. But ext_tree_free_commitdata() is called on every iteration and tries to put pages in the array, thus dereferencing uninitialized pointers. An additional problem is that there is no limit on the maximum possible buffer_size. When there are too many extents, the client may create a layoutcommit that is larger than the maximum possible RPC size accepted by the server. During testing, we observed two typical scenarios. First, one memory page for extents is enough when we work with small files, append data to the end of the file, or preallocate extents before writing. But when we fill a new large file without preallocating, the number of extents...

CVSS3: 6.2
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-38691

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree_prepare_commit() reallocates a larger buffer to retry encoding extents, the "layoutupdate_pages" page array is initialized only after the retry loop. But ext_tree_free_commitdata() is called on every iteration and tries to put pages in the array, thus dereferencing uninitialized pointers. An additional problem is that there is no limit on the maximum possible buffer_size. When there are too many extents, the client may create a layoutcommit that is larger than the maximum possible RPC size accepted by the server. During testing, we observed two typical scenarios. First, one memory page for extents is enough when we work with small files, append data to the end of the file, or preallocate extents before writing. But when we fill a new large file without preallocating, the number of extent

CVSS3: 5.5
0%
Низкий
около 1 года назад
msrc логотип
CVE-2025-38691

pNFS: Fix uninited ptr deref in block/scsi layout

CVSS3: 5.5
0%
Низкий
10 месяцев назад
debian логотип
CVE-2025-38691

In the Linux kernel, the following vulnerability has been resolved: p ...

CVSS3: 5.5
0%
Низкий
около 1 года назад
github логотип
GHSA-94hx-q75x-2q84

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree_prepare_commit() reallocates a larger buffer to retry encoding extents, the "layoutupdate_pages" page array is initialized only after the retry loop. But ext_tree_free_commitdata() is called on every iteration and tries to put pages in the array, thus dereferencing uninitialized pointers. An additional problem is that there is no limit on the maximum possible buffer_size. When there are too many extents, the client may create a layoutcommit that is larger than the maximum possible RPC size accepted by the server. During testing, we observed two typical scenarios. First, one memory page for extents is enough when we work with small files, append data to the end of the file, or preallocate extents before writing. But when we fill a new large file without preallocating, the number of ext...

CVSS3: 5.5
0%
Низкий
около 1 года назад
fstec логотип
BDU:2025-15025

Уязвимость компонента blocklayout/extent_tree.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
0%
Низкий
больше 1 года назад
redos логотип
ROS-20260403-80-0034

Уязвимость kernel-lt

CVSS3: 5.5
0%
Низкий
7 месяцев назад
redos логотип
ROS-20260403-73-0028

Уязвимость kernel-lt

CVSS3: 5.5
0%
Низкий
7 месяцев назад
oracle-oval логотип
ELSA-2025-20662

ELSA-2025-20662: Unbreakable Enterprise kernel security update (IMPORTANT)

около 1 года назад
oracle-oval логотип
ELSA-2025-25757

ELSA-2025-25757: Unbreakable Enterprise kernel security update (IMPORTANT)

12 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:4189-1

Security update for the Linux Kernel

12 месяцев назад
oracle-oval логотип
ELSA-2025-20663

ELSA-2025-20663: Unbreakable Enterprise kernel security update (IMPORTANT)

около 1 года назад
altlinux логотип
ALT-PU-2025-16619

ALT-PU-2025-16619: package `kernel-image-rt` update to version 5.10.241-alt1.rt135

CVSS3: 8.1
около 1 года назад
altlinux логотип
ALT-PU-2025-16606

ALT-PU-2025-16606: package `kernel-image-std-def` update to version 5.10.241-alt1

CVSS3: 8.1
около 1 года назад
altlinux логотип
ALT-PU-2025-16600

ALT-PU-2025-16600: package `kernel-image-un-def` update to version 6.1.151-alt1

CVSS3: 9.8
около 1 года назад
altlinux логотип
ALT-PU-2025-16510

ALT-PU-2025-16510: package `kernel-image-6.12` update to version 6.12.45-alt1

CVSS3: 9.8
около 1 года назад
altlinux логотип
ALT-PU-2025-16465

ALT-PU-2025-16465: package `kernel-image-rt` update to version 6.12.45-alt1

CVSS3: 9.8
около 1 года назад
suse-cvrf логотип
SUSE-SU-2025:3751-1

Security update for the Linux Kernel

около 1 года назад
suse-cvrf логотип
SUSE-SU-2025:03600-1

Security update for the Linux Kernel

около 1 года назад

Уязвимостей на страницу