PT-2026-90292

In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadata take snap bumps the live superblock refcount and then dm tm shadow block allocates a new block for the metadata snapshot. If the subsequent dm sm inc block of...

PT-2026-89769

live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing...

CVE-2026-89169: Improper Verification of Cryptographic Signature

live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing...

Linux Distros Unpatched Vulnerability : CVE-2026-89169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing. CVE-2026-89169 Note...

PT-2026-90087

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cache replay follows the on-media last-kset chain by next cache seg id with no cond resched. A forged chain that points back into a segment it has already visited mak...

PT-2026-90086

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments get cache segment scans the segment map up to cache-n segs, the physical device segment count, but cache segs init only initializes the first cache info-n segs segments. A craft...

PT-2026-90093

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dm kvzallocpercpu alloc size, cpu to nodecpu" fails, the code jumps to the "out" label and calls dm stat free. dm stat free does "for each possible cpucpu dm...

PT-2026-90091

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset key num and intra-segment bounds Two more fields decoded from the cache device go unbounded. The kset key num drives cache kset crc and the replay loop in cache replay, the writeback worker and the GC...

kernel: dm btree remove: fix use after free in rebalance_children()

In the Linux kernel, the following vulnerability has been resolved: dm btree remove: fix use after free in rebalancechildren Move dmtmunlock after dmtmdec...

kernel: dm-verity: fix buffer overflow in FEC calculation

A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053268)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053268 advisory. In the Linux kernel, the following vulnerability has been resolved: dm mirror: fix integer overflow in createdirtylog The argument count calculation in createdirtylo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053286)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053286 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't schedule in atomic context A BUG was reported as below when CONFIGDEBUGATOMICSLEE...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

RHEL 7 : kernel-rt (RHSA-2026:63189)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63189 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

SUSE CVE-2026-74392

In the Linux kernel, the following vulnerability has been resolved: dm: limit target bio polling to one shot dmpollbio is the -pollbio callback for a stacked dm device. The caller only knows about the dm queue, so it may decide to do a spinning poll if it thinks a single queue is being polled...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

PT-2026-83777

Name of the Vulnerable Software and Affected Versions diem-project diem versions prior to 5.1.4 Description An OS command injection flaw exists in the Administrative Console component. A remote attacker can exploit this by manipulating the dm command argument passed to the executeCommand function...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001495 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001500 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occurs if t...

SUSE CVE-2026-72096

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...