EUVD-2026-59505

In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of iflags, and ext4testinodestate applies the corresponding +32 offset. The fast-commit wait and wake paths...

CVE-2026-74358 ext4: fix fast commit wait/wake bit mapping on 64-bit

In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of iflags, and ext4testinodestate applies the corresponding +32 offset. The fast-commit wait and wake paths...

CVE-2026-74358 ext4: fix fast commit wait/wake bit mapping on 64-bit

In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of iflags, and ext4testinodestate applies the corresponding +32 offset. The fast-commit wait and wake paths...

CVE-2026-72225

The CVE-2026-72225 issue is in the Linux kernel’s journal code (jbd2). A numeric underflow occurs in jbd2_journal_initialize_fast_commit() when calculating journal capacity with (journal->j_last - num_fc_blks) where both operands are unsigned; if num_fc_blks > j_last, the subtraction wraps ...

CVE-2026-72108

CVE-2026-72108 : The Linux kernel fix addresses a metadata inconsistency in dm thin metadata when a metadata snapshot commit fails. The root cause was that __reserve_metadata_snap() and __release_metadata_snap() modified the superblock’s held_root directly in the block_manager buffer, which could...

EUVD-2026-59066

In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure reservemetadatasnap and releasemetadatasnap modify the superblock's heldroot directly in the blockmanager's buffer. If the subsequent metadata commit fails, th...

CVE-2026-72108 dm thin metadata: fix metadata snapshot consistency on commit failure

In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure reservemetadatasnap and releasemetadatasnap modify the superblock's heldroot directly in the blockmanager's buffer. If the subsequent metadata commit fails, th...

Linux Distros Unpatched Vulnerability : CVE-2026-74318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix deadlock cloning inline extent when using flushoncommit In commit b48c980b6a7e btrfs: fix deadlock between reflink and transaction commit when using...

PT-2026-72794

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext4 file system on 64-bit systems regarding the mapping of fast commit wait and wake bits. Dynamic inode states are stored in the upper half of i flags, and the...

CVE-2026-74358: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of iflags, and ext4testinodestate applies the corresponding +32 offset. The fast-commit wait and wake paths...

PT-2026-73024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the btrfs zoned filesystem during metadata writeback and transaction commit. The btree writepages function holds the fs info-zoned meta io lock throughout the...

PT-2026-72366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel when a commit operation fails within the DAMON Data Access Monitoring core. The damon commit target function manages source and destination targe...

PT-2026-72297

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm thin metadata handling where the functions reserve metadata snap and release metadata snap modify the superblock's held root directly within the block manager's...

Linux Distros Unpatched Vulnerability : CVE-2026-74572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: zoned: fix deadlock between metadata writeback and transaction commit When writing out metadata extent buffers in a zoned filesystem, btreewritepages hol...

PT-2026-72413

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer underflow exists in the jbd2 journal initialize fast commit function. The issue occurs during journal capacity validation when calculating the difference between j last and nu...

CVE-2026-47191

kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...

EUVD-2026-58719

kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...

CVE-2026-47191

kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...

CVE-2026-47191

CVE-2026-47191 affects the kas setup tool for BitBake-based projects. Before version 5.3, reliant on a git commit ID (SHA-1/SHA-256) to validate repository state could mislead users into checking out a branch with the same name, potentially indicating a repository takeover. The primary impact con...

CVE-2026-47191 kas checks out SHA-like git branches as valid commits

kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...