69 matches found
SUSE CVE-2026-99102
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on-disk attribute without holding mapping-invalidatelock. Page faults take the lock shared, so a fault racing the resize can resolve a VCN...
CVE-2026-99102
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on-disk attribute without holding mapping-invalidatelock. Page faults take the lock shared, so a fault racing the resize can resolve a VCN...
CVE-2026-99102
The Linux kernel 's ntfs filesystem is vulnerable because the ntfs_setattr_size() function updates i_size and resizes on-disk attributes without holding the mapping->invalidate_lock. This lack of synchronization allows page faults to race against the resize operation, potentially resolving a V...
CVE-2026-99102 ntfs: take invalidate_lock in ntfs_setattr_size()
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on-disk attribute without holding mapping-invalidatelock. Page faults take the lock shared, so a fault racing the resize can resolve a VCN...
CVE-2026-99102 ntfs: take invalidate_lock in ntfs_setattr_size()
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on-disk attribute without holding mapping-invalidatelock. Page faults take the lock shared, so a fault racing the resize can resolve a VCN...
EUVD-2026-112002
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on-disk attribute without holding mapping-invalidatelock. Page faults take the lock shared, so a fault racing the resize can resolve a VCN...
UBUNTU-CVE-2026-99102
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on-disk attribute without holding mapping-invalidatelock. Page faults take the lock shared, so a fault racing the resize can resolve a VCN...
CVE-2026-99102: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_setattr_size()…
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on-disk attribute without holding mapping-invalidatelock. Page faults take the lock shared, so a fault racing the resize can resolve a VCN...
CVE-2026-99102
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on-disk attribute without holding mapping-invalidatelock. Page faults take the lock shared, so a fault racing the resize can resolve a VCN...
Linux Distros Unpatched Vulnerability : CVE-2026-99102
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the on- disk attribute without holding mapping-invalidatelock. Page fault...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.1. It arises because ntfssetattrsize fails to hold a mapping-invalidatelock when updating isize and adjusting disk attributes. This can lead to page errors and resize conflicts, potentially causing VCN parsing failures and generating...
PT-2026-128095
In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate lock in ntfs setattr size ntfs setattr size updates i size and resizes the on-disk attribute without holding mapping-invalidate lock. Page faults take the lock shared, so a fault racing the resize can resolv...
PT-2026-128161
In the Linux kernel, the following vulnerability has been resolved: mshv vtl: Check per-CPU register page before mmap Register-page setup is optional for each CPU. If allocation or registration fails, mshv vtl configure reg page warns and leaves that CPU's reg page NULL, but initial context setup...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: fbdev: defio: Disconnect deferred I/O from the lifetime of struct fbinfo. Hold the state of deferred I/O in struct fbdeferrediostate. Allocate an instance as part of initializing deferred I/O and remove it only after the final...
Exploit for Out-of-bounds Read in Ocaml
I found a bug in OCaml's fix for CVE-2026-28364 While working...
PT-2026-96673
Name of the Vulnerable Software and Affected Versions Net::IDN::Punycode versions prior to 2.590 Description An issue exists where the encode punycode function fails to validate if the input is well-formed UTF-8. When a string with the UTF-8 flag set over malformed bytes reaches the encoder, the...
AZL-90489 CVE-2026-53154 affecting package kernel for versions less than 6.6.143.1-1
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore reservation on error in hugetlb folio copy paths Two sites in mm/hugetlb.c allocate a hugetlb folio via allochugetlbfolio consuming a VMA reservation and then call copyuserlargefolio, which became int-returnin...
CVE-2026-53154: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore reservation on error in hugetlb folio copy paths Two sites in mm/hugetlb.c allocate a hugetlb folio via allochugetlbfolio consuming a VMA reservation and then call copyuserlargefolio, which became int-returnin...
AZL-88514 CVE-2026-46065 affecting package kernel for versions less than 6.6.141.1-1
In the Linux kernel, the following vulnerability has been resolved: fbdev: defio: Disconnect deferred I/O from the lifetime of struct fbinfo Hold state of deferred I/O in struct fbdeferrediostate. Allocate an instance as part of initializing deferred I/O and remove it only after the final mapping...
CVE-2026-46065
CVE-2026-46065 affects the Linux kernel framebuffer (fbdev) defio mechanism. The issue arises from disconnecting deferred I/O from the lifetime of struct fb_info, by holding state in struct fb_deferred_io_state and freeing the instance only after the final mapping closes. If fb_info/defio are fre...