ROS-20260804-73-0006

The vulnerability of the xfs component in Linux operating systems is related to a lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerabilities of the CIFS file system modules such as fs/cifs/cifsdebug.c, fs/cifs/cifsdebug.h, fs/cifs/connect.c, and fs/cifs/sess.c in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the CIFS file system modules such as fs/cifs/cifsdebug.c, fs/cifs/cifsdebug.h, fs/cifs/connect.c, and fs/cifs/sess.c in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise...

The vulnerability of the `z_erofs_do_map_blocks()` function in the `fs/erofs/zmap.c` file of the EROFS Enhanced ReadOnly File System file system in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the zerofsdomapblocks function in the fs/erofs/zmap.c file of the EROFS Enhanced ReadOnly File System file system in the Linux operating system is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the ext4_fill_super() function in the fs/ext4/super.c module of the Linux file system support module allows a attacker to cause a service failure.

The vulnerability of the ext4fillsuper function in the fs/ext4/super.c module of the Linux file system support module is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

PYSEC-2026-791 OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability

The 1 GlusterFS and 2 Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header...

ROS-20260630-73-0013

The vulnerability of the ntfslookup function in the fs/ntfs3/namei.c file of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-45912

In the Linux kernel, the following vulnerability has been resolved: ext4: don't cache extent during splitting extent Caching extents during the splitting process is risky, as it may result in stale extents remaining in the status tree. Moreover, in most cases, the corresponding extent block entri...

CVE-2026-43349

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid uninit-value access in f2fssanitychecknodefooter syzbot reported a f2fs bug as below: BUG: KMSAN: uninit-value in f2fssanitychecknodefooter+0x374/0xa20 fs/f2fs/node.c:1520 f2fssanitychecknodefooter+0x374/0xa20...

Linux Distros Unpatched Vulnerability : CVE-2026-31714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to avoid memory leak in f2fsrename syzbot reported a f2fs bug as below: BUG: memory leak unreferenced object 0xffff888127f70830 size 16: comm syz.0.23...

Linux Distros Unpatched Vulnerability : CVE-2026-43053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: close crash window in attr dabtree inactivation When inactivating an inode with node-format extended attributes, xfsattr3nodeinactive invalidates all child...

EUVD-2026-26652

In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivation When inactivating an inode with node-format extended attributes, xfsattr3nodeinactive invalidates all child leaf/node blocks via xfstransbinval, but intentionally does not remo...

The vulnerability of the __debugfs_file_removed() function in the fs/debugfs/inode.c module of the Linux file system support module allows a hacker to trigger a service failure.

The vulnerability of the debugfsfileremoved function in the fs/debugfs/inode.c file of the Linux file system support module is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xfs_trans_alloc_dir() function in the fs/xfs/xfs_trans.c module of the Linux file system support module allows a attacker to cause a service failure.

The vulnerability of the xfstransallocdir function in the fs/xfs/xfstrans.c module of the Linux file system support module is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ni_write inode() function in the fs/ntfs3/frecord.c module of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the niwrite inode function in the fs/ntfs3/frecord.c file of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dax_iomap_iter() function in the fs/dax.c module of the XFS file system in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the daxiomapiter function in the fs/dax.c module of the XFS file system in Linux operating systems is related to the improper handling of “dirty” cache blocks by the fsdax module when the Copy-on-Write mechanism is enabled. Exploiting this vulnerability can allow an attacker ...

The vulnerability of the cow_file_range() function in the fs/btrfs/inode.c module of the Linux file system support module allows a hacker to cause a service failure.

The vulnerability of the cowfilerange function in the fs/btrfs/inode.c module of the Linux file system support module is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the ext4destroyInline_data_nolock() function in the fs/ext4/inline.c file of the Linux operating system’s Ext4 file system allows a attacker to cause a service failure.

The vulnerability of the ext4destroyInlinedatanolock function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...

SUSE CVE-2025-71069

In the Linux kernel, the following vulnerability has been resolved: f2fs: invalidate dentry cache on failed whiteout creation F2FS can mount filesystems with corrupted directory depth values that get runtime-clamped to MAXDIRHASHDEPTH. When RENAMEWHITEOUT operations are performed on such...

PT-2025-52945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ntfs3 file system related to out-of-bounds read access in the hdr delete de function. Specifically, a flaw exists where the kernel does not...

CVE-2025-40246 xfs: fix out of bounds memory read error in symlink repair

In the Linux kernel, the following vulnerability has been resolved: xfs: fix out of bounds memory read error in symlink repair xfs/286 produced this report on my test fleet: ================================================================== BUG: KFENCE: out-of-bounds read in memcpyorig+0x54/0x110...