Most recent entries from all

certfr-2026-avi-1249 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2026-avi-1249

fkie_cve-2026-53615

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.

msrc_CVE-2026-53615 — util-linux libblkid DOS extended-partition overflow produces invalid partition metadata

msrc_CVE-2026-53615

UBUNTU-CVE-2026-53615

Affected: Ubuntu:14.04:LTS: util-linux, Ubuntu:Pro:16.04:LTS: util-linux, Ubuntu:18.04:LTS: util-linux, Ubuntu:Pro:20.04:LTS: util-linux, Ubuntu:22.04:LTS: util-linux, Ubuntu:24.04:LTS: util-linux, Ubuntu:25.10: util-linux, Ubuntu:26.04:LTS: util-linux

[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

WID-SEC-W-2026-2938 — util-linux: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in util-linux ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.