https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:15:16 +0000 https://vulnerability.circl.lu/vuln/cve-2023-53796 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>f2fs: fix information leak in f2fs_move_inline_dirents()</p> <p>When converting an inline directory to a regular one, f2fs is leaking uninitialized memory to disk because it doesn&#39;t initialize the entire directory block. Fix this by zero-initializing the block.</p> <p>This bug was introduced by commit 4ec17d688d74 (&#34;f2fs: avoid unneeded initializing when converting inline dentry&#34;), which didn&#39;t consider the security implications of leaking uninitialized memory to disk.</p> <p>This was found by running xfstest generic/435 on a KMSAN-enabled kernel.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>f2fs: fix information leak in f2fs_move_inline_dirents()</p> <p>When converting an inline directory to a regular one, f2fs is leaking uninitialized memory to disk because it doesn&#39;t initialize the entire directory block. Fix this by zero-initializing the block.</p> <p>This bug was introduced by commit 4ec17d688d74 (&#34;f2fs: avoid unneeded initializing when converting inline dentry&#34;), which didn&#39;t consider the security implications of leaking uninitialized memory to disk.</p> <p>This was found by running xfstest generic/435 on a KMSAN-enabled kernel.</p> https://vulnerability.circl.lu/vuln/cve-2023-53796