CVE-2026-23141

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in rangeisholeinparent Before accessing the diskbytenr field of a file extent item we need to check if we are dealing with an inline extent. This is because for inline extents their data star...

The vulnerability of the ext4destroyInline_data_nolock() function in the fs/ext4/inline.c file of the Linux operating system’s Ext4 file system allows a attacker to cause a service failure.

The vulnerability of the ext4destroyInlinedatanolock function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...

SUSE-SU-2026:20564-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer bsc1254408. - CVE-2025-39880: ceph: fix race condition validating rparent before applying state...

PT-2026-43851

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gfs2 iomap inline data write path. The inline data buffer head dibh is released prematurely in the gfs2 iomap begin function via release metapath,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005023)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005023 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix race condition between ext4write and ext4convertinlinedata Hulk Robot reported a BUGON:...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38222)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38222 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: inline: fix len overflow in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001584)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001584 advisory. A race condition was discovered in ext4writeinlinedataend in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001180 advisory. In the Linux kernel 4.13 through 4.16.11, ext4readinlinedata in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003407)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003407 advisory. In the Linux kernel 4.13 through 4.16.11, ext4readinlinedata in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002957 advisory. In the Linux kernel 4.13 through 4.16.11, ext4readinlinedata in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ext4: detecting invalid INLINEDATA + EXTENTS flag combinations The syzbot reported a BUGON in ext4escacheextent when opening a Verity file on a corrupted ext4 filesystem that was mounted without a journal. The issue arises when t...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993285 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix delayed allocation bug in ext4clumapped for bigalloc + inline When converting files wit...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992744)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992744 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in ext4updateinlinedata Syzbot found the following issue: EXT4-fs loop0: mount...

CVE-2023-54311

In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when converting an inline directory in nojournal mode In no journal mode, ext4finishconvertinlinedir can self-deadlock by calling ext4handledirtydirblock when it already has taken the directory lock. There is a...

CVE-2023-54311

In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when converting an inline directory in nojournal mode In no journal mode, ext4finishconvertinlinedir can self-deadlock by calling ext4handledirtydirblock when it already has taken the directory lock. There is a...

UBUNTU-CVE-2023-54311

In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when converting an inline directory in nojournal mode In no journal mode, ext4finishconvertinlinedir can self-deadlock by calling ext4handledirtydirblock when it already has taken the directory lock. There is a...

CVE-2023-54311 ext4: fix deadlock when converting an inline directory in nojournal mode

In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when converting an inline directory in nojournal mode In no journal mode, ext4finishconvertinlinedir can self-deadlock by calling ext4handledirtydirblock when it already has taken the directory lock. There is a...

CVE-2023-54311

In the Linux kernel, CVE-2023-54311 affects ext4 when converting an inline directory in nojournal mode. The issue is a self-deadlock: ext4_finish_convert_inline_dir() can deadlock by calling ext4_handle_dirty_dirblock() while the directory lock is already held; a related self-deadlock exists in e...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992284 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix delayed allocation bug in ext4clumapped for bigalloc + inline When converting files wit...

PT-2025-54157

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where a deadlock can occur when converting an inline directory in nojournal mode. Specifically, the ext4 finish convert inline dir function may cause a...