The vulnerability of the ext4_mb_scan_groups() function in the fs/ext4/mballoc.c file of the Ext4 file system in the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the ext4mbscangroups function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploitation of this vulnerability could allow an attacker to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001434 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse the buffer of the extents path In ext4exttrytomergeup, set path1.pbh to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001471)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001471 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4extinsertextent As Ojaswin mentioned in Link, in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001435 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: drop ppath from ext4extreplayupdateex to avoid double-free When calling...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001404 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up for an...

The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the ext4 kernel component in Linux operating systems is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-80528

A flaw was found in the Linux kernel's Ceph filesystem. When the kernel handles replies and fills inode and dentry caches, a memory allocation can trigger a memory reclamation process. This process can incorrectly interpret Ceph-specific data as a journal handle if it interacts with another...

SUSE CVE-2026-74307

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as the original file. Currently, this validation is performed inside...

SUSE CVE-2026-74308

In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4writeinlinedataend When the data=journal mount option is used, the ext4journalledwriteend function incorrectly calls ext4writeinlinedataend without checking if the EXT4STATEMAYINLINEDATA flag is still...

UBUNTU-CVE-2026-80528

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cache from an MDS reply. An allocation in this section can enter direct...

CVE-2026-80528: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cache from an MDS reply. An allocation in this section can enter direct...

PT-2026-82241

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs get bgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of servic...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098780 advisory. In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bugon in jbd2journalgetcreateaccess when file system corrupted There's issue when fil...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098849)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098849 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entrie...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098809 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4fillsuper Th...

ROS-20260826-73-0014

The vulnerability of the ext4rename function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098716 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper error handling in ext4readinlinefolio Replace BUGON with proper...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098946 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't zero the entire extent if EXT4EXTDATAPARTIALVALID1 When allocating initialized blocks...

CVE-2026-80528: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cache from an MDS reply. An allocation in this section can enter direct...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098949)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098949 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where...