Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990181 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extentchangeset-byteschanged in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990188)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990188 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount During the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989652)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989652 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory ordering between normal and ordered work functions Ordered work functions aren'...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988743 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extentchangeset-byteschanged in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990212)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990212 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfsioctllogicaltoino Syzbot reported the following information...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fix for the iteration of extrefs during log replay. When calling inodeaddref and processing extrefs, if we jump to the next label, the value of victimname.len is undefined. This occurs because victimname.len wasn’t...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: subpage: keep the TOWRITE tag until the folio is cleaned The btrfssubpagesetwriteback function calls foliostartwriteback the first time a folio is written back. It also clears the PAGECACHETAGTOWRITE tag, even if there...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed a race condition between rename operations and directory logging. We have a race condition between a rename operation and directory inode logging. If this race condition occurs, and the system crashes or loses power...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not allow relocation of partially dropped subvolumes BUG There is an internal report indicating that a balance-related transaction aborted, with the following call trace: item 85 key 594509824 169 0 itemoff 12599 itemsi...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: perform proper folio cleanup when cowfilerange fails BUG When testing with COW fixup marked as BUGON this involves the new pinuserpages change, which should not result in new out-of-band dirty pages, I encountered a crash...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed a race condition related to block group refcounts in btrfscreatependingblockgroups. The creation of block groups occurs in two phases, resulting in a somewhat unintuitive behavior: A block group can be...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl There is a race between a task that disables quotas and another task that runs the rescan ioctl. This can lead to a use-after-free of qgroup records from the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Correctly handled csum tree errors with rescue=ibadroots. BUG There is a syzbot-based reproducer that can cause the kernel to crash. The call trace is as follows with some debug output added: DEBUG: rescue=ibadroots...

Astra Linux - уязвимость в linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: exit gracefully if reloc roots don't match BUG Syzbot reported a crash that an ASSERT got triggered inside preparetomerge. CAUSE The root cause of the triggered ASSERT is we can have a race between quota tree creation and...

btrfs: do not assert we found block group item when creating free space tree

...

SUSE CVE-2025-40101

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST At the end of btrfsloadblockgroupzoneinfo the first thing we do is to ensure that if the mapping type is not a SINGLE one and there is no RAID stripe...

USN-7854-1 linux-kvm vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7854-1: Linux kernel (KVM) vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

EUVD-2025-36977

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST At the end of btrfsloadblockgroupzoneinfo the first thing we do is to ensure that if the mapping type is not a SINGLE one and there is no RAID stripe...

EUVD-2025-36978

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when creating free space tree Currently, when building a free space tree at populatefreespacetree, if we are not using the block group tree feature, we always expect to find block...