AlmaLinux 9.2 [TuxCare] Security Update: grub2-common / grub2-efi-aa64-modules / grub2-efi-x64 / etc (ALMALINUX9.2:CLSA-2024:1724871398)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1724871398 advisory. - An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a...

CVE-2026-98139

A flaw was found in the Linux kernel's NTFS New Technology File System driver. When errors occur while releasing storage blocks, the driver mistakenly counts failed release operations as successfully freed space. A local user could exploit this behavior to cause file system state corruption and a...

PT-2026-98799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs dio zero range function fails to correctly handle errors from blkdev issue zeroout. Because the failure check in ntfs attr fallocate did...

PT-2026-98800

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs sync fs function unconditionally clears the dirty bit of a volume. This behavior differs from ntfs put super and the remount-read-only...

PT-2026-98801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs cluster free from rl nolock function incorrectly increments the nr freed counter even when ntfs bitmap clear run fails. This occurs...

PT-2026-98802

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the NTFS driver when the write mft record nolock function maps the MFT record folio using kmap local folio. If the pre write mst fixup or bio add folio functions...

PT-2026-98803

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the update reparse data function ignores the return value of set reparse index. If the index insertion fails, the system removes the recently...

PT-2026-98798

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the NTFS driver. The function ntfs attr find in attrdef iterates through the in-memory $AttrDef table, but the loop condition only validates the start of...

PT-2026-94480

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where unprivileged users can write to reserved extended attributes xattrs. Specifically, the setxattr function fails to restrict the modification of...

PT-2026-94479

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the NTFS driver when handling resident iomap reads. The function ntfs read iomap begin resident traverses the Master File Table MFT record via ntfs attr lookup and...

PT-2026-94465

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs mft record alloc function fails to validate the usa ofs variable before using it to read the update sequence number from an on-disk...

PT-2026-94482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Compressed I/O paths in the NTFS driver incorrectly handle memory mapping by discarding the address returned by the kmap local page function and subsequently accessing or unmapping the...

PT-2026-94481

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap out-of-bounds write exists in the NTFS driver. The function ntfs ir to ib copies entries from index root into a buffer of index block size bytes without verifying if the entries f...

CVE-2026-89613

A flaw was found in the Linux kernel's NTFS filesystem driver. This vulnerability occurs when the driver processes an attribute with empty mapping pairs that have inconsistent highest Virtual Cluster Number VCN and size. A local attacker could potentially craft a malicious NTFS filesystem that,...

CVE-2026-89611

A flaw was found in the Linux kernel. The NTFS file system driver does not properly validate non-resident attribute offsets when converting between sparse and non-sparse attributes. A local attacker could craft a malicious Master File Table MFT record, which could lead to writing data beyond...

CVE-2026-89611

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfsattrupdatemeta shifts the attribute name when converting between non-sparse and sparse attributes. Converting to sparse also adds the compressedsize field before the name and...

CVE-2026-89613

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inconsistent highest VCN and size...

AZL-100067 CVE-2026-89611 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfsattrupdatemeta shifts the attribute name when converting between non-sparse and sparse attributes. Converting to sparse also adds the compressedsize field before the name and...

DEBIAN-CVE-2026-89613

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inconsistent highest VCN and size...

CVE-2026-89611

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfsattrupdatemeta shifts the attribute name when converting between non-sparse and sparse attributes. Converting to sparse also adds the compressedsize field before the name and...