GO-2026-5942 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, cloudnative-pg-fips, buildkite-agent, rabbitmq-messaging-topology-operator-fips, mediamtx-fips, docker-compose-fips, cert-manager-google-cas-issuer, zarf, ctop, livekit-server-fips, kube-state-metrics, virt-operator,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: containerd, fuse-overlayfs-snapshotter, zot, k3s, kine, loki...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, up, kaniko, helm-push, gitness, helm, cilium-cli, melange, zot, flux-helm-controller, k8sgpt, ctop, k3d, flux-source-controller, buildkitd, grype, kubescape, skaffold, kots, kubevela, trivy, fuse-overlayfs-snapshotter, eksctl...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: wuzz, runc, fuse-overlayfs-snapshotter, k3s, k8s-device-plugin, aws-load-balancer-controller, gitness...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: wuzz, runc, fuse-overlayfs-snapshotter, k3s, k8s-device-plugin, aws-load-balancer-controller, gitness...

SUSE CVE-2026-68448

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

CVE-2026-68448

A flaw was found in the Linux kernel's overlayfs component. When copying files across different overlay filesystems, the system incorrectly checked read permissions using the destination filesystem's credentials instead of the source's. This oversight could allow an unauthorized user to read file...

AZL-95513 CVE-2026-68448 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

CVE-2026-68448

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

DEBIAN-CVE-2026-68448

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

CVE-2026-68448

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

CVE-2026-68448

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

CVE-2026-68448 ovl: check access to copy_file_range source with src mounter creds

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

CVE-2026-68448

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

CVE-2026-68448

The CVE-2026-68448 entry concerns the Linux kernel overlayfs copy_file_range path. Previously, cross-filesystem copy could proceed using the destination overlayfs’s mounter credentials, with the source file’s read path checked using the destination’s credentials. This could deny a permitted copy ...

EUVD-2026-57054

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

CVE-2026-68448 ovl: check access to copy_file_range source with src mounter creds

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

CVE-2026-68448: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

PT-2026-70964

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the overlayfs implementation of the copy file range function. When performing a cross-sb cross-superblock copy between two different overlayfs filesystems, the operati...

Linux Distros Unpatched Vulnerability : CVE-2026-68448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c vfs: allow copyfilerange to copy across devices allowed filesystems that...