Количество 5
Количество 5
CVE-2026-89840
(In the Linux kernel, the following vulnerability has been resolved: f ...)
CVE-2026-89840
In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVE_RANGE destination size F2FS_IOC_MOVE_RANGE checks the source range, but not the destination end before updating i_size. A source hole can expose this: __clone_blkaddrs() skips NULL_ADDR entries and returns success, so the caller can still extend the destination inode with unchecked pos_out + len. Reject destination overflow and use inode_newsize_ok() before extending the destination inode.
CVE-2026-89840
f2fs: validate MOVE_RANGE destination size
CVE-2026-89840
In the Linux kernel, the following vulnerability has been resolved: f ...
GHSA-6fmr-6rhp-m3p8
In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVE_RANGE destination size F2FS_IOC_MOVE_RANGE checks the source range, but not the destination end before updating i_size. A source hole can expose this: __clone_blkaddrs() skips NULL_ADDR entries and returns success, so the caller can still extend the destination inode with unchecked pos_out + len. Reject destination overflow and use inode_newsize_ok() before extending the destination inode.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-89840 (In the Linux kernel, the following vulnerability has been resolved: f ...) | CVSS3: 7.1 | 0% Низкий | 5 дней назад |
 | CVE-2026-89840 In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVE_RANGE destination size F2FS_IOC_MOVE_RANGE checks the source range, but not the destination end before updating i_size. A source hole can expose this: __clone_blkaddrs() skips NULL_ADDR entries and returns success, so the caller can still extend the destination inode with unchecked pos_out + len. Reject destination overflow and use inode_newsize_ok() before extending the destination inode. | CVSS3: 7.1 | 0% Низкий | 6 дней назад |
 | CVE-2026-89840 f2fs: validate MOVE_RANGE destination size | 0% Низкий | 5 дней назад | |
| CVE-2026-89840 In the Linux kernel, the following vulnerability has been resolved: f ... | CVSS3: 7.1 | 0% Низкий | 6 дней назад |
| GHSA-6fmr-6rhp-m3p8 In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVE_RANGE destination size F2FS_IOC_MOVE_RANGE checks the source range, but not the destination end before updating i_size. A source hole can expose this: __clone_blkaddrs() skips NULL_ADDR entries and returns success, so the caller can still extend the destination inode with unchecked pos_out + len. Reject destination overflow and use inode_newsize_ok() before extending the destination inode. | CVSS3: 7.1 | 0% Низкий | 6 дней назад |
Уязвимостей на страницу