AZL-94340 CVE-2026-56847 affecting package nodejs for versions less than 24.18.1-1

A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...

CVE-2026-56847

A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...

CVE-2026-56847

A flaw in Node.js Permission Model enforcement allows trace_events.createTracing().enable() to write trace logs outside the --allow-fs-write boundary, leading to confidentiality impact or bypass of the intended security boundary under affected configurations. The vulnerability affects Node.js 22....

NewStart CGSL MAIN 6.06 : kata-runtime-neo Vulnerability (NS-SA-2026-0064)

The remote NewStart CGSL host, running version MAIN 6.06, has kata-runtime-neo packages installed that are affected by a vulnerability: - A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to creat...

kernel security update

6.12.0-211.39.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of gix-fs

Summary The cargo package manager in IBM Open SDK for Rust on AIX 1.92.0.2 and 1.94.0.0 uses version 0.19 of the gix-fs crate which is vulnerable to improper link resolution before file access. Vulnerability Details CVEID:CVE-2026-44471 DESCRIPTION: gitoxide is an implementation of git written in...

RLSA-2026:45114 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fs/notify: call exportfsencodefid with sumount CVE-2025-40237 kernel: scsi: core: Wake up the error handler when final completions race against each other CVE-2026-23110 kernel: rtnetlink...

CVE-2026-64532: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFSDE view.dataoff in UpdateRecordDataRoot,Allocation In doaction's UpdateRecordDataRoot fslog.c:3489 and UpdateRecordDataAllocation fslog.c:3697 cases, the memmove destination is Add2Ptre, le16tocpue-view.dataof...

CVE-2026-64533: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcnsfollow in logreplay conversion logreplay converts DIRPAGEENTRY32 records into DIRPAGEENTRY records when replaying version 0 restart tables. During this conversion, the memmove length is derived directly fro...

The vulnerability of the nfs4_free_ol_stateid() function in the fs/nfsd/nfs4state.c module, which supports the Network File System in Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the nfs4freeolstateid function in the fs/nfsd/nfs4state.c module, which is part of the network file system support in Linux kernel, relates to operations involving resources after their expiration. Exploiting this vulnerability could allow a remote attacker to cause service...

CVE-2026-64477: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled The architecture updates the cpumask in a domain's header to track which online CPUs are associated with the domain. When this mask becomes empty t...

CVE-2026-64432: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in logreplay copylcns In the analysis pass of $LogFile journal replay, logreplay copies LCNs from each action log record into an existing Dirty Page Table DPT entry without bounding th...

MAL-2026-11027 Malicious code in fs-extra-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397f5c6f4eb2cf734d5ee1afc9908bdd0162a91a2fc6ad6d7d51a5cfd22fdc41 Package impersonates fs-extra by copying its description, homepage github.com/jprichardson/node-fs-extra, and repository metadata verbatim. Its...

Malicious code in fs-extra-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397f5c6f4eb2cf734d5ee1afc9908bdd0162a91a2fc6ad6d7d51a5cfd22fdc41 Package impersonates fs-extra by copying its description, homepage github.com/jprichardson/node-fs-extra, and repository metadata verbatim. Its...

Malicious Package

Overview fs-extra-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-42272

File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope...

CVE-2026-64147

In the Linux kernel, the following vulnerability has been resolved: pdscore: fix debugfslookup dentry leak and error handling debugfslookup returns a dentry with an elevated reference count that must be released with dput. The current code discards the returned dentry without calling dput, causin...

CVE-2026-63819: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fsgetnodefoliora kernel BUG at fs/f2fs/file.c:845! Oops: invalid opcode: 0000 1 SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller 0 PREEMPTfull Hardware name: QEMU...

CVE-2026-64074: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in statmountmntidmap statmountmntidmap writes one mapping with seqprintf and then manually advances seq-count to include the NUL separator. If seqprintf overflows, seqsetoverflow sets...

CVE-2026-50428

The CVE-2026-50428 entry concerns an Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) that enables a locally authorized attacker to disclose information (information disclosure). The issue affects the Windows Container Isolation FS Filter Driver path and is confirm...