Vulnerability Spotlight: Callback Technologies CBFS Filter denial-of-service vulnerabilities

Summary: Cisco Talos discovered three null pointer dereference denial-of-service vulnerabilities in Callback Technologies CBFS Filter, tracked as TALOS-2022-1647 (CVE-2022-43588), TALOS-2022-1648 (CVE-2022-43589) and TALOS-2022-1649 (CVE-2022-43590). A specially crafted I/O request packet or ioctl can trigger the flaws, and Talos confirmed version 20.0.8317 was exploitable while working with Callback Technologies on an update.
Key Takeaway: Three separate CVEs in a file-system filter component mean an attacker who can issue an ioctl can knock over the storage layer it manages, and Talos confirmed the tested build was exploitable before the fix.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-43588 CVE-2022-43589 CVE-2022-43590
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026