Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 27

Количество 27

ubuntu логотип

CVE-2025-39835

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may also return ENODATA. At best, this medium error may escape to userspace as "attribute not found" when in fact it's an IO (disk) error. At worst, we may oops in xfs_attr_leaf_get() when we do: error = xfs_attr_leaf_hasname(args, &bp); if (error == -ENOATTR) { xfs_trans_brelse(args->trans, bp); return error; } because an ENODATA/ENOATTR error from disk leaves us with a null bp, and the xfs_trans_brelse will then null-deref it. As discussed on the list, we really need to modify the lower level IO functions to trap all disk errors and ensure that we don't let unique errors like this leak up into higher xfs functions - many like this should be remapped to EIO. However, this patch directly addr...

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2025-39835

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may also return ENODATA. At best, this medium error may escape to userspace as "attribute not found" when in fact it's an IO (disk) error. At worst, we may oops in xfs_attr_leaf_get() when we do: error = xfs_attr_leaf_hasname(args, &bp); if (error == -ENOATTR) { xfs_trans_brelse(args->trans, bp); return error; } because an ENODATA/ENOATTR error from disk leaves us with a null bp, and the xfs_trans_brelse will then null-deref it. As discussed on the list, we really need to modify the lower level IO functions to trap all disk errors and ensure that we don't let unique errors like this leak up into higher xfs functions - many like this should be remapped to EIO. However, this patch directly addr...

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2025-39835

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may also return ENODATA. At best, this medium error may escape to userspace as "attribute not found" when in fact it's an IO (disk) error. At worst, we may oops in xfs_attr_leaf_get() when we do: error = xfs_attr_leaf_hasname(args, &bp); if (error == -ENOATTR) { xfs_trans_brelse(args->trans, bp); return error; } because an ENODATA/ENOATTR error from disk leaves us with a null bp, and the xfs_trans_brelse will then null-deref it. As discussed on the list, we really need to modify the lower level IO functions to trap all disk errors and ensure that we don't let unique errors like this leak up into higher xfs functions - many like this should be remapped to EIO. However, this patch d

CVSS3: 7.8
EPSS: Низкий
msrc логотип

CVE-2025-39835

9 месяцев назад

xfs: do not propagate ENODATA disk errors into xattr code

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2025-39835

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: x ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-x6rc-wf46-fv7m

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may also return ENODATA. At best, this medium error may escape to userspace as "attribute not found" when in fact it's an IO (disk) error. At worst, we may oops in xfs_attr_leaf_get() when we do: error = xfs_attr_leaf_hasname(args, &bp); if (error == -ENOATTR) { xfs_trans_brelse(args->trans, bp); return error; } because an ENODATA/ENOATTR error from disk leaves us with a null bp, and the xfs_trans_brelse will then null-deref it. As discussed on the list, we really need to modify the lower level IO functions to trap all disk errors and ensure that we don't let unique errors like this leak up into higher xfs functions - many like this should be remapped to EIO. However, this patc...

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2025-15676

около 1 года назад

Уязвимость компонента xfs ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20260804-80-0007

3 месяца назад

Уязвимость kernel-lt

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20260804-73-0006

3 месяца назад

Уязвимость kernel-lt

CVSS3: 5.5
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16620

около 1 года назад

ALT-PU-2025-16620: package `kernel-image-rt` update to version 5.10.242-alt1.rt136

CVSS3: 7.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16607

около 1 года назад

ALT-PU-2025-16607: package `kernel-image-std-def` update to version 5.10.242-alt1

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3725-1

около 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03601-1

около 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
oracle-oval логотип

ELSA-2025-25757

12 месяцев назад

ELSA-2025-25757: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-25754

12 месяцев назад

ELSA-2025-25754: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03633-1

около 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2025-16600

около 1 года назад

ALT-PU-2025-16600: package `kernel-image-un-def` update to version 6.1.151-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16510

около 1 года назад

ALT-PU-2025-16510: package `kernel-image-6.12` update to version 6.12.45-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16465

около 1 года назад

ALT-PU-2025-16465: package `kernel-image-rt` update to version 6.12.45-alt1

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3751-1

около 1 года назад

Security update for the Linux Kernel

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-39835

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may also return ENODATA. At best, this medium error may escape to userspace as "attribute not found" when in fact it's an IO (disk) error. At worst, we may oops in xfs_attr_leaf_get() when we do: error = xfs_attr_leaf_hasname(args, &bp); if (error == -ENOATTR) { xfs_trans_brelse(args->trans, bp); return error; } because an ENODATA/ENOATTR error from disk leaves us with a null bp, and the xfs_trans_brelse will then null-deref it. As discussed on the list, we really need to modify the lower level IO functions to trap all disk errors and ensure that we don't let unique errors like this leak up into higher xfs functions - many like this should be remapped to EIO. However, this patch directly addr...

CVSS3: 7.8
0%
Низкий
около 1 года назад
redhat логотип
CVE-2025-39835

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may also return ENODATA. At best, this medium error may escape to userspace as "attribute not found" when in fact it's an IO (disk) error. At worst, we may oops in xfs_attr_leaf_get() when we do: error = xfs_attr_leaf_hasname(args, &bp); if (error == -ENOATTR) { xfs_trans_brelse(args->trans, bp); return error; } because an ENODATA/ENOATTR error from disk leaves us with a null bp, and the xfs_trans_brelse will then null-deref it. As discussed on the list, we really need to modify the lower level IO functions to trap all disk errors and ensure that we don't let unique errors like this leak up into higher xfs functions - many like this should be remapped to EIO. However, this patch directly addr...

CVSS3: 5.5
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-39835

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may also return ENODATA. At best, this medium error may escape to userspace as "attribute not found" when in fact it's an IO (disk) error. At worst, we may oops in xfs_attr_leaf_get() when we do: error = xfs_attr_leaf_hasname(args, &bp); if (error == -ENOATTR) { xfs_trans_brelse(args->trans, bp); return error; } because an ENODATA/ENOATTR error from disk leaves us with a null bp, and the xfs_trans_brelse will then null-deref it. As discussed on the list, we really need to modify the lower level IO functions to trap all disk errors and ensure that we don't let unique errors like this leak up into higher xfs functions - many like this should be remapped to EIO. However, this patch d

CVSS3: 7.8
0%
Низкий
около 1 года назад
msrc логотип
CVE-2025-39835

xfs: do not propagate ENODATA disk errors into xattr code

CVSS3: 7.8
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-39835

In the Linux kernel, the following vulnerability has been resolved: x ...

CVSS3: 7.8
0%
Низкий
около 1 года назад
github логотип
GHSA-x6rc-wf46-fv7m

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may also return ENODATA. At best, this medium error may escape to userspace as "attribute not found" when in fact it's an IO (disk) error. At worst, we may oops in xfs_attr_leaf_get() when we do: error = xfs_attr_leaf_hasname(args, &bp); if (error == -ENOATTR) { xfs_trans_brelse(args->trans, bp); return error; } because an ENODATA/ENOATTR error from disk leaves us with a null bp, and the xfs_trans_brelse will then null-deref it. As discussed on the list, we really need to modify the lower level IO functions to trap all disk errors and ensure that we don't let unique errors like this leak up into higher xfs functions - many like this should be remapped to EIO. However, this patc...

CVSS3: 7.8
0%
Низкий
около 1 года назад
fstec логотип
BDU:2025-15676

Уязвимость компонента xfs ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
0%
Низкий
около 1 года назад
redos логотип
ROS-20260804-80-0007

Уязвимость kernel-lt

CVSS3: 5.5
0%
Низкий
3 месяца назад
redos логотип
ROS-20260804-73-0006

Уязвимость kernel-lt

CVSS3: 5.5
0%
Низкий
3 месяца назад
altlinux логотип
ALT-PU-2025-16620

ALT-PU-2025-16620: package `kernel-image-rt` update to version 5.10.242-alt1.rt136

CVSS3: 7.8
около 1 года назад
altlinux логотип
ALT-PU-2025-16607

ALT-PU-2025-16607: package `kernel-image-std-def` update to version 5.10.242-alt1

CVSS3: 7.8
около 1 года назад
suse-cvrf логотип
SUSE-SU-2025:3725-1

Security update for the Linux Kernel

около 1 года назад
suse-cvrf логотип
SUSE-SU-2025:03601-1

Security update for the Linux Kernel

около 1 года назад
oracle-oval логотип
ELSA-2025-25757

ELSA-2025-25757: Unbreakable Enterprise kernel security update (IMPORTANT)

12 месяцев назад
oracle-oval логотип
ELSA-2025-25754

ELSA-2025-25754: Unbreakable Enterprise kernel security update (IMPORTANT)

12 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:03633-1

Security update for the Linux Kernel

около 1 года назад
altlinux логотип
ALT-PU-2025-16600

ALT-PU-2025-16600: package `kernel-image-un-def` update to version 6.1.151-alt1

CVSS3: 9.8
около 1 года назад
altlinux логотип
ALT-PU-2025-16510

ALT-PU-2025-16510: package `kernel-image-6.12` update to version 6.12.45-alt1

CVSS3: 9.8
около 1 года назад
altlinux логотип
ALT-PU-2025-16465

ALT-PU-2025-16465: package `kernel-image-rt` update to version 6.12.45-alt1

CVSS3: 9.8
около 1 года назад
suse-cvrf логотип
SUSE-SU-2025:3751-1

Security update for the Linux Kernel

около 1 года назад

Уязвимостей на страницу