CVE-2026-89778

A flaw was found in the Linux kernel's isofs ISO 9660 file system component, specifically within the zisofs decompression logic. A local attacker could exploit this vulnerability by mounting a specially crafted ISO9660 image. When a compressed file on such an image contains a malformed 'ZF' Rock...

CVE-2026-90434

A flaw was found in the Linux kernel's isofs filesystem driver. When processing compressed block pointer tables via the zisofsfillpages function, a memory resource is not properly released upon successful operation. A local attacker could potentially exploit this resource mismanagement, possibly ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: isofs: The isofsexportiget function validates the block number from the NFS file handle. The isofsfhtodentry and isofsfhtoparent functions pass a attacker-controlled block number either ifid-block or ifid-parentblock from the NFS...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_49211)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202649211 advisory. kernel: ksm: use range-walk function to jump over holes in scangetnextrmapitem CVE-2025-68211 kernel: isofs: validate Rock Ridge CE continuation extent...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786350974)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786350974 advisory. - In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When...

Linux Distros Unpatched Vulnerability : CVE-2026-89778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted ZF Rock Ridge...

SUSE CVE-2026-90434

In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head zisofsfillpages reads the compressed block pointer table. The error paths release the current bufferhead, the loop also releases the old bufferhead when it advances. However, the...

Linux Distros Unpatched Vulnerability : CVE-2026-90434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - isofs: release zisofs block pointer buffer head zisofsfillpages reads the compressed block pointer table. The error paths release the current bufferhead, the lo...

CVE-2026-90434 isofs: release zisofs block pointer buffer head

In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head zisofsfillpages reads the compressed block pointer table. The error paths release the current bufferhead, the loop also releases the old bufferhead when it advances. However, the...

CVE-2026-90434 isofs: release zisofs block pointer buffer head

In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head zisofsfillpages reads the compressed block pointer table. The error paths release the current bufferhead, the loop also releases the old bufferhead when it advances. However, the...

EUVD-2026-82095

In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head zisofsfillpages reads the compressed block pointer table. The error paths release the current bufferhead, the loop also releases the old bufferhead when it advances. However, the...

CVE-2026-90434

CVE-2026-90434 affects the Linux kernel's isofs module , specifically the zisofs (compressed ISO 9660) code path. The bug resides in zisofs_fill_pages() , which reads the compressed block pointer table. While error paths and the loop correctly release buffer_head references, the success path leav...

CVE-2026-90434: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head zisofsfillpages reads the compressed block pointer table. The error paths release the current bufferhead, the loop also releases the old bufferhead when it advances. However, the...

SUSE CVE-2026-89778

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

AZL-101652 CVE-2026-89778 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

CVE-2026-89778

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

CVE-2026-89778: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: isofs: Fixed out-of-bound access for corrupted isofs images. When an isofs image is corrupted, isofsread inode can read data beyond the end of the buffer. It is necessary to sanity-check the length of the directory entry befor...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098931)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098931 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101982 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...