CVE-2026-89576

In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...

CVE-2026-89573 dm array: reject an array block whose value size is not the caller's

In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's arrayblockcheck can only compare the header against itself, so a block with valuesize 4 and maxentries 1018 is internally consistent and passes. dm-cache keeps...

CVE-2026-89573

A local out-of-bounds read in the Linux kernel's device mapper (dm) array component allows memory corruption via crafted metadata . The root cause is that array_block_check() only validates a block's header against itself, so a 4-byte value_size block with max_entries 1018 passes as internally co...

EUVD-2026-76485

In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's arrayblockcheck can only compare the header against itself, so a block with valuesize 4 and maxentries 1018 is internally consistent and passes. dm-cache keeps...

CVE-2026-89573 dm array: reject an array block whose value size is not the caller's

In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's arrayblockcheck can only compare the header against itself, so a block with valuesize 4 and maxentries 1018 is internally consistent and passes. dm-cache keeps...

CVE-2026-89573

In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's arrayblockcheck can only compare the header against itself, so a block with valuesize 4 and maxentries 1018 is internally consistent and passes. dm-cache keeps...

CVE-2026-89492 ocfs2: validate directory-index entry counts when reading metadata

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2validatedxleaf and ocfs2validatedxroot check the ECC and signature of an indexed-directory block before it reaches higher-level callers, but neither validato...

CVE-2026-89492 ocfs2: validate directory-index entry counts when reading metadata

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2validatedxleaf and ocfs2validatedxroot check the ECC and signature of an indexed-directory block before it reaches higher-level callers, but neither validato...

EUVD-2026-76398

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2validatedxleaf and ocfs2validatedxroot check the ECC and signature of an indexed-directory block before it reaches higher-level callers, but neither validato...

CVE-2026-80962

A vulnerability in the Linux kernel dm-pcache (device-mapper persistent cache) component allows a local attacker with CAP_SYS_ADMIN to trigger an out-of-bounds read and write by supplying a cache device with invalid on-disk geometry metadata. The root cause is that cache_segs_init() and get_seg_i...

CVE-2026-80962 dm-pcache: validate geometry fields from on-disk cache_info

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cacheinfo cachesegsinit iterates cacheinfo-nsegs times indexing cache-segments, which is sized to the cache device geometry, and getsegid takes each segment id from the on-media...

EUVD-2026-76285

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cacheinfo cachesegsinit iterates cacheinfo-nsegs times indexing cache-segments, which is sized to the cache device geometry, and getsegid takes each segment id from the on-media...

CVE-2026-80962 dm-pcache: validate geometry fields from on-disk cache_info

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cacheinfo cachesegsinit iterates cacheinfo-nsegs times indexing cache-segments, which is sized to the cache device geometry, and getsegid takes each segment id from the on-media...

CVE-2026-80962

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cacheinfo cachesegsinit iterates cacheinfo-nsegs times indexing cache-segments, which is sized to the cache device geometry, and getsegid takes each segment id from the on-media...

[SECURITY] Fedora 45 Update: exiv2-0.28.9-1.fc45

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

SUSE CVE-2026-88016

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --links, a source .rclonelink object can plant a symlink in the destination and later directory metadata is applied through that path...

ImpactSword

ImpactSword – Red Team Edition ImpactSword is an offensive se...

CVE-2026-89265

MoguBlog through 6.2 contains an authorization bypass in the admin endpoint POST /pictureSort/getPictureSortByUid , which omits the @AuthorityVerify annotation required to enforce role-based permissions. Authenticated back-office users without image-category permissions can supply a category uid ...

CVE-2026-84391

creationtimestamp| type| source ---|---|--- 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r...

CVE-2026-89259

creationtimestamp| type| source ---|---|--- 2026-09-11 12:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117252294469654613 2026-09-11 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvajeetqqz2f 2026-09-11 12:30:06+00:00| seen|...