Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: Added idatasem protection in ext4destroyInlinedatanolock Fixed a race condition between inline data destruction and block mapping. The function ext4destroyInlinedatanolock changes the inode data layout by clearing...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ext4: Drop the extent cache when splitting an extent fails When splitting an extent fails, it is possible that some extents are still being processed, and an error is returned directly. This will result in stale extent entries...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Fixed a double-free of blocks due to incorrect movedlen values during extent movements. In ext4moveextents, movedlen is updated only when all movements are successfully executed. It also discards preallocations for originod...

USN-8662-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - STMicroelectronics network drivers;...

USN-8661-1 linux-azure-5.15, linux-gcp, linux-gcp-fips, linux-hwe-5.15, linux-lowlatency-hwe-5.15 vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

CVE-2026-74308

A flaw was found in the Linux kernel's ext4 filesystem. When the data=journal mount option is enabled, the ext4journalledwriteend function can incorrectly attempt to write inline data. This occurs if a prior attempt to convert inline data to an extent failed, leading to an inconsistent state. An...

CVE-2026-74358

A flaw was found in the ext4 filesystem component of the Linux kernel. On 64-bit systems, an incorrect mapping of wait/wake bits during fast commits could lead to unexpected behavior. This issue, if triggered, may result in system instability or data integrity problems...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101976 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't zero the entire extent if EXT4EXTDATAPARTIALVALID1 When allocating initialized blocks...

Linux Distros Unpatched Vulnerability : CVE-2026-74358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of iflags, and ext4testinodestate applies the...

USN-8631-4: Linux kernel (Azure CVM) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

The vulnerability in the fs/ext4/extents.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to incomplete recognition of the internal state. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100709 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4extshiftextents In ext4extshiftextents, if the extent is NULL in the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100697 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double decrement on fs shutdown fstests test generic/388 occasionally...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099985)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099985 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where...

The vulnerability in the fs/ext4/extents.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100755 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't set EXT4GETBLOCKSCONVERT when splitting before submitting I/O When allocating blocks...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099744 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4fcreplayinode error paths During code review, Joseph found that...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099951 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't set EXT4GETBLOCKSCONVERT when splitting before submitting I/O When allocating blocks...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099756 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: drop extent cache when splitting extent fails When the split extent fails, we might leave...

CVE-2026-74358

In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of iflags, and ext4testinodestate applies the corresponding +32 offset. The fast-commit wait and wake paths...