PT-2026-117087

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment cache replay, the writeback worker and the GC worker read a kset of get kset onmedia size bytes and advance the position by it. A forged key num makes that size exceed the...

PT-2026-116948

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply va align to hugetlb mappings on AMD F15h get align mask returns huge page mask align for hugetlbfs, but get align bits adds va align.bits regardless, so vm unmapped area returns an address off the huge page...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: Assign CURSEGALLDATAATGC if blkaddr is valid mkdir /mnt/test/comp f2fsio.setflagscompression = /mnt/test/comp dd if=/dev/zero of=/mnt/test/comp/testfile bs=16k count=1 truncate --size 13 /mnt/test/comp/testfile In the above...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dm cache: Prevent BUGON by blocking retries on devices where the resume operation fails due to mapping errors. A cache device that fails to resume due to mapping errors should not be retried, as this will leave a partially...

PT-2026-98106

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The JFS file system fails to properly handle set blocksize failures. This occurs because JFS utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

PT-2026-104875

In the Linux kernel, the following vulnerability has been resolved: omfs: handle set blocksize failures omfs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting we will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-104844

In the Linux kernel, the following vulnerability has been resolved: jfs: handle set blocksize failures jfs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting we will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-104958

In the Linux kernel, the following vulnerability has been resolved: hpfs: handle set blocksize failures hpfs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-98105

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The hpfs file system fails to properly handle set blocksize failures. This occurs because hpfs utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

PT-2026-104906

In the Linux kernel, the following vulnerability has been resolved: affs: handle set blocksize failures affs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting we will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-98107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The qnx4 file system implementation fails to properly handle set blocksize failures. This occurs because qnx4 utilizes buffer heads, which do not effectively manage block sizes that exce...

PT-2026-98104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The omfs module fails to properly handle set blocksize failures. This occurs because omfs utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

PT-2026-104868

In the Linux kernel, the following vulnerability has been resolved: qnx4: handle set blocksize failures qnx4 uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-97945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 module where the make bad inode function is used within ocfs2 read inode block full. Because make bad inode resets the inode type to S IFREG, applying this t...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: The page is released in the error path to avoid BUGON. Consider the following sequence of events: 1. The userspace sends a UFFD ioctl, which ultimately calls shmemmfillatomicpte. We successfully account the blocks, a...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: ext4: fixed the bug in estreesearch Hulk Robot reported a BUG: kernel BUG at fs/ext4/extentsstatus.c:199! ... RIP: 0010:ext4esend fs/ext4/extentsstatus.c:199 inline RIP: 0010:estreesearch+0x1e0/0x260 fs/ext4/extentsstatus.c:21...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: In ext4, the “set goal start” operation is performed correctly in ext4mbnormalizerequest. We need to set acgex to notify the goal start used in ext4mbfindbygoal. Instead of using acfex, we should use acgex in...

PT-2026-96459

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG ON in nfsd4 alloc layout stateid on racing delegation revoke nfsd4 alloc layout stateid reads fp-fi deleg file without holding fi lock when the parent stateid is a delegation. A concurrent delegation revoke via the...

PT-2026-96534

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlm mig lockres handler A node receiving a DLM MIG LOCKRES message trusts several fields of the peer-supplied dlm migratable lockres without validation. num locks and lockname len are bounded only on th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fixed ext2setsize when len is page-aligned. The PAGEALIGNx macro returns the next highest value that is a multiple of the page size. However, if x is already page-aligned, it simply returns x. Therefore, if x is passed ...