CVE-2026-97489

A flaw was found in the Linux kernel's BFS Boot File System implementation. The kernel fails to properly verify the return value when setting the block size during a mount operation. A local user with permissions to mount file systems could exploit this issue by mounting an incompatible file syst...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ntfs: Set a dummy block size to “read bootblock” when mounting. During mounting, sb-sblocksize is used to read the bootblock without being defined or validated. Set a dummy block size before attempting to read the bootblock. The...

CVE-2026-13478 Out-of-bounds read in Zephyr ext2 block-bitmap validation from a crafted s_blocks_count

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2initfs subsys/fs/ext2/ext2impl.c by passing fsblocks = sblockscount - sfirstdatablock to ext2bitmapcountset. That helper subsys/fs/ext2/ext2bitmap.c treats its argument as a number of bits and reads one bitmap byte per...

EUVD-2026-65599

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2initfs subsys/fs/ext2/ext2impl.c by passing fsblocks = sblockscount - sfirstdatablock to ext2bitmapcountset. That helper subsys/fs/ext2/ext2bitmap.c treats its argument as a number of bits and reads one bitmap byte per...

PT-2026-81376

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2 init fs subsys/fs/ext2/ext2 impl.c by passing fs blocks = s blocks count - s first data block to ext2 bitmap count set. That helper subsys/fs/ext2/ext2 bitmap.c treats its argument as a number of bits and reads one bitma...

CVE-2026-74426

A flaw was found in the Linux kernel's AFS Andrew File System component. A local user can exploit this by triggering a specific memory allocation condition during a mount operation, leading to a null pointer dereference. This can cause the system to crash, resulting in a Denial of Service DoS...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101987 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with dropprogress and zero droplevel BUG When recovering relocation at...

CVE-2026-7867

Affected software: udisks2. Vulnerability: insufficient authorization check on the as-user parameter in org.freedesktop.UDisks2.Filesystem.Mount() allows a local attacker to spoof as-user and mount on behalf of arbitrary users, enabling local privilege escalation via mount point namespace manipul...

SUSE CVE-2026-46055

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix string overrun due to missing termination When booting Ubuntu 26.04 with Linux 7.0-rc4 on an ARM64 Qualcomm Snapdragon X1 we see a string buffer overrun: BUG: KASAN: slab-out-of-bounds in aadfamatch...

kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation

A flaw was found in the Linux kernel's Squashfs filesystem. A local attacker can exploit this vulnerability by simultaneously mounting a Squashfs filesystem and issuing a specific input/output control ioctl command. This can lead to an incorrect block size calculation, causing a shift-out-of-boun...

kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation

A flaw was found in the Linux kernel's Squashfs filesystem. A local attacker can exploit this vulnerability by simultaneously mounting a Squashfs filesystem and issuing a specific input/output control ioctl command. This can lead to an incorrect block size calculation, causing a shift-out-of-boun...

kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation

A flaw was found in the Linux kernel's Squashfs filesystem. A local attacker can exploit this vulnerability by simultaneously mounting a Squashfs filesystem and issuing a specific input/output control ioctl command. This can lead to an incorrect block size calculation, causing a shift-out-of-boun...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37742)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37742 advisory. - In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of imap...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

SUSE CVE-2025-71105

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inlinexattrslab instead of per-sb slab cache As Hong Yun reported in mailing list: loop7: detected capacity change from 0 to 131072 ------------ cut here ------------ kmemcache of name 'f2fsxattrentry-7:7' alread...

CVE-2025-71067 ntfs: set dummy blocksize to read boot_block when mounting

In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read bootblock when mounting When mounting, sb-sblocksize is used to read the bootblock without being defined or validated. Set a dummy blocksize before attempting to read the bootblock. The issue can...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993135 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR recovery wor...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992618 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR recovery wor...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992211)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992211 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR recovery wor...

kernel: ext4: fix undefined behavior in bit shift for ext4_check_flag_values

A vulnerability was identified in the Linux kernel's ext4 filesystem implementation due to a flaw in how it processes filesystem metadata. An attacker with local privileges could create a malicious ext4 filesystem image to trigger this issue. When the system attempts to mount this malicious image...