PT-2026-61383

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs read to pagecache function where the system fails to pause the generation of new subrequests when a previously issued subrequest fails. Recommendations At th...

Linux Distros Unpatched Vulnerability : CVE-2026-63810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel filesystem with which userspace should not...

PT-2026-61381

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where netfs invalidate folio fails to clear the dirty bit when all changes in a folio are removed during a file truncation. This leaves the folio i...

PT-2026-61376

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs perform write function where folio-private is not correctly manipulated between NULL, NETFS FOLIO COPY TO CACHE, group pointers, and netfs folio structures...

PT-2026-61375

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs read folio function where it fails to wait for an ongoing writeback to complete. This can lead to a situation where the system cannot trust the dirty flag or...

PT-2026-61374

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The afs filesystem in the kernel implements incorrect locking for symbolic links. This leads to several issues, including a lack of locking around the afs read single function, which can...

PT-2026-61385

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where locking is missing when adding new subrequests. Specifically, the functions netfs retry read subrequests and netfs retry write stream fail to...

PT-2026-61377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the netfs write begin function during error handling. Specifically, the system fails to release the reference to the request when an error is returned from the...

PT-2026-61126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bdev pseudo-filesystem, an internal kernel filesystem that should not be accessible to userspace. A kernel NULL pointer dereference occurs when userspace attempts ...

PT-2026-61109

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the NTFS driver due to a lack of serialization when accessing volume labels. This occurs when the FS IOC SETFSLABEL operation replaces the vol-volume lab...

PT-2026-61070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An inconsistency in the f2fs file system occurs during fsck operations due to the incorrect usage of nat entry flags. The function f2fs need dentry mark reads these flags without mutual...

PT-2026-61379

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock exists in the netfs component when operating in write-through mode. The issue occurs within the netfs advance writethrough function, where a failure to consistently...

PT-2026-61384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the list of subrequests attached to stream-subrequests is accessed without locks by the functions netfs collect read results and netfs collec...

PT-2026-61474

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs invalidate folio function where partial invalidation of a streaming-write folio is handled incorrectly. When a partial invalidation region overlaps the front...

CVE-2026-16077 AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link following

A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function normalizerwpath of the file astrbot/core/tools/computertools/fs.py of the component Filesystem Computer-Use Tool. Performing a manipulation results in link following. The attack is only possible with local...

EUVD-2026-45356

A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function normalizerwpath of the file astrbot/core/tools/computertools/fs.py of the component Filesystem Computer-Use Tool. Performing a manipulation results in link following. The attack is only possible with local...

CVE-2026-16077

A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function normalizerwpath of the file astrbot/core/tools/computertools/fs.py of the component Filesystem Computer-Use Tool. Performing a manipulation results in link following. The attack is only possible with local...

kernel: XFS data corruption using reflink

A flaw was found in the XFS filesystem. A race condition in the copy-on-write mechanism for reflinked files can cause writes to bypass the copy-on-write process and modify shared data blocks directly. As a result, data intended for a private copy may be written to the original shared location,...

CVE-2026-9587

CVE-2026-9587 describes an authenticated local file inclusion in Sangoma Switchvox SMB Edition 8.3 (104997). The issue resides in the play_file function where the sound_path input is not properly validated, allowing an attacker to supply absolute paths to read files outside the intended directory...

UBUNTU-CVE-2026-9494

An information disclosure vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in...