LEAF

Linux Evidence Acquisition Framework LEAF Author: Alexandra Cartwright April, 2022 Description Linux Evidence Acquisition Framework LEAF acquires artifacts and evidence from Linux EXT4 systems, accepting user input to customize the functionality of the tool for easier scalability. Offering severa...

cve-2017-7374

cve-2017-7374 To trigger the vulnerability, we need a ext4 file system with encryption support and create a encrypted directory...

ffs

FFS - F File System This is a cli tool for searching files like grep that does not use the OS kernel to read files, but reads your disks directly. It is practically useless, but insanely cool. this is just 1.5k lines of C code that: requires sudo only when reading a raw device node e.g. /dev/rdis...

extundelete

extundelete ext3 or ext4 undelete utility http://extundelete.sourceforge.net/...

SUSE CVE-2026-98941

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

DEBIAN-CVE-2026-98941

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

CVE-2026-98941

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

CVE-2026-98885

In the Linux kernel, the following vulnerability has been resolved: ima: return error early if file xattr cannot be changed During early boot, the filesystem is read-only and any changes to xattrs are not allowed. This fails in case of ext4 because changing xattr starts an ext4 transaction which...

EUVD-2026-108913

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

CVE-2026-98941

The Linux kernel is vulnerable in versions v6.19 through v7.2 due to an issue where the ext4 filesystem may enable large folios on encrypted inodes if the encryption feature is enabled while the filesystem is already mounted. This bypasses mount-time checks and causes a kernel NULL pointer derefe...

CVE-2026-98941 ext4: don't enable large folios on encrypted inodes

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

CVE-2026-98941 ext4: don't enable large folios on encrypted inodes

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

CVE-2026-98941

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

EUVD-2026-108679

In the Linux kernel, the following vulnerability has been resolved: ima: return error early if file xattr cannot be changed During early boot, the filesystem is read-only and any changes to xattrs are not allowed. This fails in case of ext4 because changing xattr starts an ext4 transaction which...

CVE-2026-98885 ima: return error early if file xattr cannot be changed

In the Linux kernel, the following vulnerability has been resolved: ima: return error early if file xattr cannot be changed During early boot, the filesystem is read-only and any changes to xattrs are not allowed. This fails in case of ext4 because changing xattr starts an ext4 transaction which...

CVE-2026-98885

The Linux kernel contains a vulnerability in the ima (Integrity Measurement Architecture) subsystem where it fails to handle read-only filesystems correctly during early boot. Specifically, when the system attempts to change xattrs (extended attributes) on an ext4 filesystem that is currently rea...

CVE-2026-98885 ima: return error early if file xattr cannot be changed

In the Linux kernel, the following vulnerability has been resolved: ima: return error early if file xattr cannot be changed During early boot, the filesystem is read-only and any changes to xattrs are not allowed. This fails in case of ext4 because changing xattr starts an ext4 transaction which...

CLSA-2026-1792752282 kernel: Fix of 90 CVEs

can: esdusb: kill anchored URBs before freeing netdevs CVE-2026-64585 - ext4: fix kernel BUG in ext4writeinlinedataend CVE-2026-74308 - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop CVE-2026-72348 - xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst...

CLSA-2026-1792751773 kernel: Fix of 88 CVEs

can: esdusb: kill anchored URBs before freeing netdevs CVE-2026-64585 - ext4: fix kernel BUG in ext4writeinlinedataend CVE-2026-74308 - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop CVE-2026-72348 - xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst...

CLSA-2025-1763990271 Fix of 11 CVEs

Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2024-58072 - wifi: rtlwifi: remove unused checkbuddypriv Focal update: v5.4.291 upstream stable release LP: 2106002 - wifi: rtlwifi: remove unused timer and related code - wifi: rtlwifi: remove unused dualmac control leftovers Foca...