3928 matches found
CVE-2026-97551 xfs: initialise args->total for parent pointer updates
In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total == 0. xfsdagrowinodeint treats that field as a running block reservatio...
CVE-2026-97551 xfs: initialise args->total for parent pointer updates
In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total == 0. xfsdagrowinodeint treats that field as a running block reservatio...
CVE-2026-97551
The Linux kernel 's xfs filesystem contains a vulnerability where xfs_parent_da_args_init() initializes xfs_parent_args with a zeroed value, leaving args->total at 0. During attribute fork growth, xfs_da_grow_inode_int() treats this as a running block reservation; because it is an xfs_extlen_t...
EUVD-2026-86859
In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total == 0. xfsdagrowinodeint treats that field as a running block reservatio...
CVE-2026-97551: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total == 0. xfsdagrowinodeint treats that field as a running block reservatio...
PT-2026-98491
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS filesystem where the xfs parent da args init function initializes xfs da args from a zeroed xfs parent args, leaving the args-total variable set to 0. The xfs ...
PT-2026-98735
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A store-buffering pattern exists in the release in xmit function. The function uses clear bit unlock to clear RDS IN XMIT, which orders the critical section before the bit clear but fail...
PT-2026-98492
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs defer finish one function declares an error variable without an initial value. If the dfp-dfp work list is empty, the loop that assig...
PT-2026-98732
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Reliable Datagram Sockets RDS implementation. The rds conn shutdown function attempts to quiesce transmit and receive-refill paths by checking if RDS IN XM...
PT-2026-98731
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Reliable Datagram Sockets RDS implementation. The rds conn shutdown function incorrectly handles the RDS CONN ERROR state during its final transition to RD...
CVE-2026-97551
In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total == 0. xfsdagrowinodeint treats that field as a running block reservatio...
Linux Distros Unpatched Vulnerability : CVE-2026-97551
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total ==...
PT-2026-98489
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.3 Description An issue exists in the XFS file system where blocks are under-reserved when repairing shortform directories. This occurs because the xfs da args object passed to xfs dir2 sf to block incorrectly...
DEBIAN-CVE-2026-93285
In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fsgckthread in f2fssbinfo Instead of allocating f2fsgckthread dynamically, embed it in f2fssbinfo. This simplifies lifetime management and prepares for fixing race conditions during teardown. - sbistore -...
CVE-2026-97491
The Linux kernel contains a vulnerability in the net/rds component where the rds_ib_conn_path_shutdown function improperly sleeps. Specifically, a shutdown worker thread uses a wait_event call that blocks other work items in the queue, leading to a system hang during the teardown of IB network co...
PT-2026-97965
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash occurs in the octeon staging driver. The cvm oct rx shutdown function calls free irq and netif napi del without first disabling the NAPI instance. Since free irq...
PT-2026-104961
In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds ib conn path shutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the wait event call, which blocks oth...
PT-2026-98110
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hang occurs during the teardown of ib network configurations. This issue is caused by the shutdown worker thread sleeping on the wait event call, which subsequently blocks other work...
CVE-2026-93285
In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fsgckthread in f2fssbinfo Instead of allocating f2fsgckthread dynamically, embed it in f2fssbinfo. This simplifies lifetime management and prepares for fixing race conditions during teardown. - sbistore -...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090052)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090052 advisory. In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection...