CVE-2026-63997

A flaw was found in the ethtool module of the Linux kernel. The moduleflashfwschedule function fails to properly undo the setting of the 'inprogress' flag and the taking of the netdev reference during module flash errors. This oversight can lead to a resource leak, preventing the device from bein...

CVE-2026-63820

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. This vulnerability occurs when the f2fsreaddatalargefolio function fails to submit a read block I/O bio request if an error is encountered on a subsequent memory page folio. This can cause earlier folios to remain...

CVE-2026-63818

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. This vulnerability arises from improper validation of the orphan inode entry count during the recovery process. A local attacker could craft a malicious F2FS image, which, when mounted on an unpatched system, could...

CVE-2026-63817

A flaw was found in the Linux kernel's F2FS file system. When the compresscache mount option is disabled, a corrupted directory entry could point to an invalid inode number. The system incorrectly processes this as a valid internal inode, bypassing critical validation checks. This vulnerability...

CVE-2026-63816

A flaw was found in the f2fs Flash-Friendly File System component of the Linux kernel. This use-after-free UAF vulnerability occurs during garbage collection operations when handling Copy-On-Write COW files. A local attacker could exploit this by triggering garbage collection, leading to a...

CVE-2026-63814

A flaw was found in the Linux kernel's Flash-Friendly File System f2fs. A local attacker could exploit improper validation of Access Control List ACL entry sizes to cause a memory corruption, leading to a system crash or denial of service. This occurs when malformed ACL entries cause the system t...

CVE-2026-63812

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System. Incorrect handling of extent information during inode destruction can lead to a stale extent cache. This can result in data integrity issues or filesystem corruption, potentially requiring administrative intervention to repai...

CVE-2026-63813

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. A race condition can occur when an f2fs partition is nearly full, involving interactions between garbage collection, folio splitting, and LRU Least Recently Used isolation. This race can cause a folio a group of pag...

CVE-2026-63811

A flaw was found in the Linux kernel's f2fs filesystem. During an atomic write operation, the system may attempt to decrypt data using an incorrect encryption context, specifically when the original file is unencrypted but its Copy-On-Write COW inode is encrypted. This mismatch can lead to a...

CVE-2026-53368

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. A race condition exists where the f2fsneeddentrymark function incorrectly reads natentry flags without proper synchronization during checkpoint operations. This can lead to an inconsistent inode block marking state,...

CVE-2026-32822

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

EUVD-2026-45981

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

CVE-2026-32822

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

CVE-2026-32822 dataCycle Unauthenticated Reflected DOM XSS Via flash[...] On Public Pages

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

CVE-2026-32822

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

CVE-2026-32822 dataCycle Unauthenticated Reflected DOM XSS Via flash[...] On Public Pages

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

CVE-2026-32822

Technical details are not publicly available in the provided documents. No specific affected versions, vulnerable components, or fixes are disclosed here. Monitor for updates.

PT-2026-61615

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

CVE-2026-32822: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

Linux Distros Unpatched Vulnerability : CVE-2026-63997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is...