advisories

LinnemanLabs Research and Advisories Security research, advisories, and proof-of-concept code from LinnemanLabs. Advisories and Research Links to write-ups, disclosures, and reproducible PoCs. Project| Findings / Techniques| CVEs| Result| Write-up| PoC ---|---|---|---|---|--- bluez| ?| ?| LPE to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151160 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in checknewmap on session freed during unlock checknewmap iterates mdsc-sessions an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151297 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export getname cephgetname copies the MDS-supplied...

AZL-113116 CVE-2026-124040 affecting package ceph 18.2.2-13

CivetWeb through 1.16, when built with USEHTTP2 and enablehttp2 on, contains a use-after-free vulnerability in handlehttp2 that retains freed :method and :path pointers. Unauthenticated remote attackers can send a later HEADERS frame omitting these pseudo-headers to influence request method or pa...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During the unlock window, handlecapflushack can acquire icephlock, detach cf...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ceph: reject exporttargets ranks = CEPHMAXMDS in mdsmap decode The MDSMap exporttargets entries are monitored. checknewmap uses each entry as a bit number in a fixed stack bitmap; thus, a rank outside the protocol namespace can...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in checknewmap on session freed during unlock checknewmap iterates through mdsc-sessions, and for each active session, it drops mdsc-mutex to perform per-session operations. The forced-close path where the rank is...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cache from an MDS reply. An allocation in this section can enter direct...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging cephgetcaps with stale mdswanted A reader can hang forever in cephgetcaps when the client no longer holds FILERD, but local cap state still indicates that the capability is already wanted via mdswanted. One way ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ceph: Fix for numops off-by-one when crypto allocation fails The movedirtyfolioinpagearray function may fail if the file is encrypted, if the dirty folio is not the first in the batch, and if it fails to allocate a bounce buffer ...

SUSE CVE-2025-30156

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...

CVE-2026-90042

A flaw was found in the Ceph filesystem client within the Linux kernel. This vulnerability arises from the improper handling of memory buffers during filename decryption, specifically when buffers are allocated in the vmalloc region. This can lead to a kernel panic, causing the system to crash. A...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in sock clone early bailouts CVE-2026-68399 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix busy dentry warning on unmount after DIO CVE-2026-72315 In the Linux...

GHSA-J586-36CW-2GC2 vulnerabilities

Vulnerabilities for packages: airflow, openstack-glance-2025.2, openstack-nova-2025.1, openstack-kolla-toolbox-2025.2, openstack-tempest-2026.1, openstack-cinder-2026.1, openstack-placement-2025.2, openstack-horizon-2025.2-fips, openstack-nova-2025.2, openstack-heat-2025.2,...

Updated arrow, thrift, ceph packages fix security vulnerabilities

The updated packages fix many security vulnerabilities. Please see the links for additional information...

MGASA-2026-0562 Updated arrow, thrift, ceph packages fix security vulnerabilities

The updated packages fix many security vulnerabilities. Please see the links for additional information...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146687)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146687 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: bound numexporttargets array for mds info v2/v3 cephmdsmapdecode in fs/ceph/mdsmap.c reads...

PT-2026-129130

An access control bypass flaw was found in Samba's vfs ceph rgw module in it's openat function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs ceph rgw module. When a client requests an existing file using...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-136)

The version of kernel installed on the remote host is prior to 5.10.271-272.1120. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-136 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in foucreat...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146307 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointe...