CVE-2026-52791

Fuse-overlayfs (overlayfs in FUSE for rootless containers) before version 1.17 on the release-1.x C branch preserves SUID/SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file. This may allow a low-privilege process to leave the upper-layer file with mode 4777. T...

CVE-2026-52791 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

Linux Distros Unpatched Vulnerability : CVE-2026-52791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in...

PT-2026-65846

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openO TRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

container-tools:ol8 security, bug fix, and enhancement update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-3 - rebuild for CVE-2025-68121 - Resolves: RHEL-149262 cockpit-podman 84.1-1 - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 - Related: Jira:RHEL-25557 conmon...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm, helm-mapkubeapis, wolfictl, cluster-api-helm-controller, docker, envoy-gateway, helm-operator, kaniko, opa, opa-envoy, gatekeeper, rancher-agent, consul-k8s, kargo, tw, docker-cli-buildx, helm-push, k8ssandra-client, grype, zot,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: chartmuseum, datadog-agent-fips, helm-set-status, docker-fips, helm-exporter-fips, packer, kubescape-operator-fips, helm-mapkubeapis, k8ssandra-client-fips, rancher, osv-scanner, zarf-fips, helm-exporter, jfrog-cli, envoy-gateway-fips, consul-k8s, dagger, kargo,...

SUSE CVE-2026-31465

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...

EUVD-2026-24809

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...

CVE-2026-31465

CVE-2026-31465 in the Linux kernel concerns the writeback path for filesystems without data integrity guarantees (e.g., fuse). The fix adds a SB_I_NO_DATA_INTEGRITY superblock flag; when set, sync kicks off writeback of dirty inodes but does not wait for flusher threads to finish. The change move...

PT-2026-34370

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB I NO DATA INTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitness, k8s-device-plugin, runc, wuzz, k3s, aws-load-balancer-controller...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, etcd-fips, rke2-runtime-fips, wuzz, rke2-runtime, terraform, k3s, aws-load-balancer-controller, gitness, gendesk, k8s-device-plugin, etcd, cilium-envoy, nvidia-gpu-operator-validator, cilium-envoy-fips, gitlab-rails-ce, runc, localstack,...

CVE-2025-58190 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, etcd-fips, rke2-runtime-fips, wuzz, rke2-runtime, terraform, k3s, aws-load-balancer-controller, gitness, gendesk, k8s-device-plugin, etcd, cilium-envoy, nvidia-gpu-operator-validator, cilium-envoy-fips, gitlab-rails-ce, runc, localstack,...

CVE-2025-47911 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, etcd-fips, rke2-runtime-fips, wuzz, rke2-runtime, terraform, k3s, aws-load-balancer-controller, gitness, gendesk, k8s-device-plugin, etcd, cilium-envoy, nvidia-gpu-operator-validator, cilium-envoy-fips, gitlab-rails-ce, runc, localstack,...

CVE-2025-47911 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitness, k8s-device-plugin, runc, wuzz, k3s, aws-load-balancer-controller...

CVE-2025-58190 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitness, k8s-device-plugin, runc, wuzz, k3s, aws-load-balancer-controller...

MiracleLinux 8 : container-tools: rhel8 (AXSA:2020-295:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-295:01 advisory. QEMU: Slirp: potential OOB access due to unsafe snprintf usages CVE-2020-8608 Bug Fixes: useradd and groupadd fail under rootless Buildah and podman Podman...

container-tools:rhel8 security update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/a7f8179 - fixes 'CVE-2025-47913...