CVE-2026-53612

A flaw was found in util-linux. When an /etc/fstab entry uses the user option together with X-mount.owner, X-mount.group, or X-mount.mode, mount8 changes ownership or permissions on the mount target after mounting without re-verifying the path. A local unprivileged user can exploit this...

ALPINE-CVE-2026-48711

SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path and findbasepath removes the brackets, leaving a host value that begins with - and is passed directly to ssh as a command-line...

AZL-97014 CVE-2026-48711 affecting package fuse-sshfs 3.7.3-1

SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path and findbasepath removes the brackets, leaving a host value that begins with - and is passed directly to ssh as a command-line...

CVE-2026-48711

SSHFS (a network filesystem client for SSH) is vulnerable to argument injection in its find_base_path() function. From version 1.4 through 3.7.5, a bracketed mount source such as [-oProxyCommand=CMD]:/path has its brackets stripped, leaving a host value beginning with - that is passed directly to...

CVE-2026-48711 SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path and findbasepath removes the brackets, leaving a host value that begins with - and is passed directly to ssh as a command-line...

EUVD-2026-62494

SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path and findbasepath removes the brackets, leaving a host value that begins with - and is passed directly to ssh as a command-line...

CVE-2026-48711 SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path and findbasepath removes the brackets, leaving a host value that begins with - and is passed directly to ssh as a command-line...

CVE-2026-74426

A flaw was found in the Linux kernel's AFS Andrew File System component. A local user can exploit this by triggering a specific memory allocation condition during a mount operation, leading to a null pointer dereference. This can cause the system to crash, resulting in a Denial of Service DoS...

CVE-2026-72205

A flaw was found in the Linux kernel's NTFS filesystem driver. When an attempt to mount an NTFS volume fails, the ntfsfillsuper function's error handling path does not properly free all volume-wide resources. This oversight leads to a silent resource leak, where memory and other resources...

CVE-2026-72379

A flaw was found in the Linux kernel's filesystem fs component. The vfstmpfile function, used for creating temporary files with OTMPFILE, did not properly verify if a caller's user and group IDs fsuid and fsgid were mapped within an idmapped mount. This oversight could allow a local user to creat...

CVE-2026-72185

A flaw was found in the Linux kernel's NTFS filesystem driver. A specially crafted NTFS image could cause the system to incorrectly process attribute data during mounting. This could lead to a kernel warning and corruption of internal data structures, potentially resulting in system instability o...

Linux Distros Unpatched Vulnerability : CVE-2026-72193

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs3: cap RESTARTTABLE free-chain walker at rt-used A crafted NTFS3 disk image triggers an in-kernel infinite loop at mount time, hanging the mounting thread...

Linux Distros Unpatched Vulnerability : CVE-2026-72196

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: bound copylcns dp-pagelcns index in analysis pass In logreplay's analysis pass, after finddp returns a valid DIRPAGEENTRY for the targetattr, targetv...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101987 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with dropprogress and zero droplevel BUG When recovering relocation at...

Linux Distros Unpatched Vulnerability : CVE-2026-72478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: add bounds check to rungethighestvcn rungethighestvcn parses a packed NTFS mapping- pairs buffer without any length bound, relying solely on a 0x00...

EUVD-2026-60205

FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to validate them. However, KubeVirt relies on a KUBECONFIG file mounted to the container and completely ignores the credentials. This allows any user of the...

CVE-2026-71566 KubeVirt backend is not authenticated

FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to validate them. However, KubeVirt relies on a KUBECONFIG file mounted to the container and completely ignores the credentials. This allows any user of the...

CVE-2026-71566

FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to validate them. However, KubeVirt relies on a KUBECONFIG file mounted to the container and completely ignores the credentials. This allows any user of the...

CVE-2026-71566

FakeFish passes credentials to scripts for real hardware BMC validation, but the KubeVirt backend ignores them entirely, relying on a mounted KUBECONFIG file. This lets any cluster user control, power-cycle, and attach arbitrary CD images to VMs owned by other users. CVSS 9.3 (Critical). No patch...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100381 advisory. In the Linux kernel, the following vulnerability has been resolved: ext2: Check block size validity during mount Check that log of block size stored in the superbloc...