CVE-2026-80806

CVE-2026-80806 is a flaw in the Linux kernel's ext4 filesystem where newly created encrypted files could incorrectly have the DAX (Direct Access) flag enabled when the filesystem is mounted with -o dax=always. The root cause is a timing issue in __ext4_new_inode(): the call to ext4_set_inode_flag...

SUSE CVE-2026-74308

In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4writeinlinedataend When the data=journal mount option is used, the ext4journalledwriteend function incorrectly calls ext4writeinlinedataend without checking if the EXT4STATEMAYINLINEDATA flag is still...

PT-2026-82241

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs get bgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of servic...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098849)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098849 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entrie...

CVE-2026-74308

A flaw was found in the Linux kernel's ext4 filesystem. When the data=journal mount option is enabled, the ext4journalledwriteend function can incorrectly attempt to write inline data. This occurs if a prior attempt to convert inline data to an extent failed, leading to an inconsistent state. An...

CVE-2026-74307

A flaw was found in the Linux kernel's ext4 filesystem. A local attacker can trigger a deadlock by performing an EXT4IOCMOVEEXT ioctl operation with a donor file from a different filesystem during a concurrent freeze operation. This late validation creates a circular lock dependency, leading to a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101976 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't zero the entire extent if EXT4EXTDATAPARTIALVALID1 When allocating initialized blocks...

USN-8631-4: Linux kernel (Azure CVM) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

The vulnerability in the fs/ext4/extents.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to incomplete recognition of the internal state. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100342 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ex...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100341 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with sfirstdatablock != 0 bigalloc with sfirstdatablock != 0 is no...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100382)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100382 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4getgroupinfo to fail Previously, ext4getgroupinfo would treat an invalid group...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100755 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't set EXT4GETBLOCKSCONVERT when splitting before submitting I/O When allocating blocks...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100098)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100098 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4mbfindbygoal There's issue as follows:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099732 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4setattr...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100340)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100340 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4mbfindbygoal There's issue as follows:...

CVE-2026-74307

The CVE-2026-74307 entry describes a Linux kernel/ext4 vulnerability in EXT4_IOC_MOVE_EXT where donor file superblock validation is done late (inside mext_check_validity after acquiring inode locks), creating a deadlock with sb_writers during cross-filesystem donor use (e.g., overlayfs). The issu...

Linux Distros Unpatched Vulnerability : CVE-2026-74308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix kernel BUG in ext4writeinlinedataend When the data=journal mount option is used, the ext4journalledwriteend function incorrectly calls...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2026-31450: ext4: publish jinode after initialization bsc1262618. CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2capsockreadycb bsc1262603. CVE-2026-31624:...

EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2889)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfnCVE-2026-31586 e1000/e1000e: Fix leak in DMA error cleanupCVE-2026-43445 futex: Clear stale...