SUSE-SU-2026:4363-1 Security update for libtpms

This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

PT-2026-98109

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The affs file system fails to properly handle set blocksize failures. This occurs because affs utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

PT-2026-98104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The omfs module fails to properly handle set blocksize failures. This occurs because omfs utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

PT-2026-104875

In the Linux kernel, the following vulnerability has been resolved: omfs: handle set blocksize failures omfs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting we will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

PT-2026-98108

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The bfs filesystem fails to properly handle set blocksize failures. Because bfs utilizes buffer heads, it cannot effectively manage block sizes that exceed the PAGE SIZE. This issue lead...

PT-2026-98106

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The JFS file system fails to properly handle set blocksize failures. This occurs because JFS utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

PT-2026-104844

In the Linux kernel, the following vulnerability has been resolved: jfs: handle set blocksize failures jfs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting we will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...

CVE-2026-95958 JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

SUSE-SU-2026:23878-1 Security update for libtpms

This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ntfs: Set a dummy block size to “read bootblock” when mounting. During mounting, sb-sblocksize is used to read the bootblock without being defined or validated. Set a dummy block size before attempting to read the bootblock. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: romfs: Check the return value of sbsetblocksize. The romfsfillsuper function ignores the return value of sbsetblocksize, which may fail if the requested block size is incompatible with the block device’s configuration. This issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the return result of sbminblocksize Syzkaller reports a bug named “UBSAN: shift-out-of-bounds in squashfsbioread”. Syzkaller forks multiple processes. After mounting the Squashfs filesystem, it issues an...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed a memory leak in ext4fillsuper. The buffer head references must be released before calling killbdev;. Otherwise, the buffer head and the page referenced by bdata will not be freed by killbdev, and subsequently, tha...

PT-2026-64543

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UDF file system implementation where the udf load sparable map function incorrectly treats the reallocationTableLen variable as a byte count instead of an entry...

SUSE CVE-2026-53130

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

CVE-2026-53130

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

CVE-2026-53130

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

CVE-2026-53130 fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

EUVD-2026-38998

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

CVE-2026-53130 fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...