UBUNTU-CVE-2026-23410

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: because the rawdata inodes are not refcounted, an attacker can start opening one of the rawdata files, and at the same...

CVE-2026-23411 apparmor: fix race between freeing data and fs accessing it

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to iprivate data on its end after removing the original entry from the file system. However the inode can aand does live beyond that...

CVE-2026-23411 apparmor: fix race between freeing data and fs accessing it

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to iprivate data on its end after removing the original entry from the file system. However the inode can aand does live beyond that...

CVE-2026-23411

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to iprivate data on its end after removing the original entry from the file system. However the inode can aand does live beyond that...

CVE-2026-23410

CVE-2026-23410 – Linux kernel (AppArmor) race condition has a documented use-after-free in rawdata handling. The issue occurs when rawdata inodes aren’t refcounted, allowing an attacker to open a rawdata file while the last reference is removed (e.g., via profile removal), freeing the aa_loaddata...

CVE-2026-23411

CVE-2026-23411 corresponds to a Linux kernel AppArmor race condition: freeing i_private data can race with filesystem access because the inode may outlive references. The issue is resolved by moving the put of i_private referenced data to the correct place during inode eviction. Affects AppArmor ...

Linux debugfs file removed buffer overflow DoS

The vulnerability of the debugfsfileremoved function in the fs/debugfs/inode.c file of the Linux file system support module is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-23411

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to iprivate data on its end after removing the original entry from the file system. However the inode can aand does live beyond that...

Linux Btrfs Inode Heap Buffer Overflow DoS

The vulnerability in the fs/btrfs/inode.c module of the Linux operating system is related to the unlocking of a resource that should not be unlocked. Exploiting this vulnerability could allow an attacker to gain access to read and modify data...

Linux Btrfs Heap Buffer Overflow DoS

The vulnerability of the cowfilerangeInline function in the fs/btrfs/inode.c module of the Linux kernel is related to the lack of resource release after the expiration of the license period. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

fs/pstore/inode.c Heap Buffer Overflow DoS

The vulnerability of the pstoreputbackendrecords function in the fs/pstore/inode.c module, which is part of the Linux kernel’s persistent storage support, is related to a error that occurs when memory previously released is reclaimed. Exploiting this vulnerability could allow an attacker to cause...

Linux kernel HFS inode buffer overflow DoS

The vulnerability of the hfswrite inode function in the fs/hfs/inode.c module of the Linux file system is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2026-34353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext4 file system during the mkdir and mknod paths. When mapping logical blocks to physical blocks, if inserting a new extent into the extent tree fails, the ext4 e...

Apple HFSplus inode functions DoS

The vulnerability of the functions hfspluscatread inode and hfspluscatwrite inode in the fs/hfsplus/inode.c module, which is part of the Apple HFS file system support in Linux, is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to cause a servi...

Linux kernel Btrfs Heap Buffer Overflow DoS

The vulnerability of the btrfsreadlocked inode function in the fs/btrfs/inode.c file of the Linux kernel’s file system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

fs/afs/inode.c Heap Buffer Overflow DoS

The vulnerability of the afsgetattr function in the fs/afs/inode.c file of the Andrew File System kernel for Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel IMA DoS

The vulnerability of the ima inodehash function in the security/integrity/ima/imamain.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2026-23375

In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes filethpenabled incorrectly allows THP for files on anonymous inodes e.g. guestmemfd and secretmem. These files are created via allocfilepseudo, which does not call getwriteaccess an...

EUVD-2026-15365

In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes filethpenabled incorrectly allows THP for files on anonymous inodes e.g. guestmemfd and secretmem. These files are created via allocfilepseudo, which does not call getwriteaccess an...

CVE-2026-23375

In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes filethpenabled incorrectly allows THP for files on anonymous inodes e.g. guestmemfd and secretmem. These files are created via allocfilepseudo, which does not call getwriteaccess an...