PT-2026-72744

In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4 write inline data end When the data=journal mount option is used, the ext4 journalled write end function incorrectly calls ext4 write inline data end without checking if the EXT4 STATE MAY INLINE DATA...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2026-31450: ext4: publish jinode after initialization bsc1262618. CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2capsockreadycb bsc1262603. CVE-2026-31624:...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ext4: Do not zero the entire extent if EXT4EXTDATAPARTIALVALID1 is true. When allocating initialized blocks from a large unwritten extent, or when splitting an unwritten extent during end I/O and converting it to an initialized...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Filesystems without the casefold feature cannot be mounted with siphash. When mounting the ext4 filesystem, if the default hash version is set to DXHASHSIPHASH, but the casefold feature is not enabled, exit the mounting...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fixed a null pointer derefrence in ext4raw inode If ext4getinodeloc fails e.g., if it returns -EFSCORRUPTED, iloc.bh will remain set to NULL. Since ext4xattr inodedecrefall lacks error checking, this will lead to a...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Fixed a memory leak in ext4extshiftextents. In ext4extshiftextents, if the extent is NULL during the while loop, the function returns immediately without releasing the path obtained via ext4findextent. This leads to a memor...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed an out-of-bound read in ext4xattrinodedecrefall. The issue is as follows: BUG: KASAN: Use-after-free in ext4xattr inodedecrefall+0x6ff/0x790. A read of size 4 was performed at address ffff88807b003000 by the task...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Refresh the inline data size before write operations The cached ei-iInlineSize can become stale between the initial size check and when ext4updateInlineData/ext4createInlineData use it. Although ext4getmaxInlineSize reads t...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: In ext4, the order of execution of functions ext4percpuparaminit and ext4mbinit has been changed. When running kvm-xfstests -c ext4/1k -C 1 generic/383 with the DOUBLECHECK macro defined, a panic occurs as follows:...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ext4: Drop the extent cache when splitting an extent fails When splitting an extent fails, it is possible that some extents are still being processed, and an error is returned directly. This will result in stale extent entries...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Added idatasem protection in ext4destroyInlinedatanolock Fixed a race condition between inline data destruction and block mapping. The function ext4destroyInlinedatanolock changes the inode data layout by clearing...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-3071)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bridge: brndsend: linearize skb before parsing ND optionsCVE-2026-31682 media: mc, v4l2: serialize REINIT and REQBUFS with...

EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2930)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfnCVE-2026-31586 e1000/e1000e: Fix leak in DMA error cleanupCVE-2026-43445 futex: Clear stale...

EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2889)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfnCVE-2026-31586 e1000/e1000e: Fix leak in DMA error cleanupCVE-2026-43445 futex: Clear stale...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-2971)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : USB: core: Limit the length of unkillable synchronous timeoutsCVE-2026-43428 usb: typec: ucsi: validate connector number in...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-111 (ALASKERNEL-5.15-2026-111)

The version of kernel installed on the remote host is prior to 5.15.211-149.249. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-111 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper erro...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-39782)

In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2logdocheckpoint Both jbd2logdocheckpoint and jbd2journalshrinkcheckpointlist periodically release jlistlock after processing a batch of buffers to avoid long hold times on the jlistlock. However,...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper error handling in ext4readinlinefolio CVE-2026-31451 In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache...

CVE-2026-64378 writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroupwritebackumount and inodeswitchwbs When a container exits, the following BUGON is occasionally triggered: ================================================================== VFS: Busy inodes after...

PT-2026-64599

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.10.y through 6.6.y Description A race condition exists between the cgroup writeback umount and inode switch wbs/cleanup offline cgwb functions. This occurs when a container exits, creating a window between the time inod...