PT-2026-82152

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xlog recover do reg buffer function fails to properly validate the bounds of a buffer log item's dirty bitmap. During mount-time log...

PT-2026-82148

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop issue exists in the XFS file system during online fsck operations. The xrep iunlink resolve bucket function, which reconstructs incore prev and next unlinked list pointe...

Linux Distros Unpatched Vulnerability : CVE-2026-80533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agib...

Linux Distros Unpatched Vulnerability : CVE-2026-80530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix exchange-range reflink flag clearing issue with INO1WRITTEN When exchanging two full-file ranges, xmicanexchangereflinkflags can move the reflink inode...

PT-2026-82153

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the root level validation of the rtrefcount btree within the XFS file system. The functions xfs rtrefcountbt verify and xfs iformat rtrefcount incorrectly u...

PT-2026-82154

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs rtginode ensure function incorrectly handles errors from xfs rtginode load. Specifically, it treats all errors except -ENOENT as...

PT-2026-82150

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs dq get next id function fails to release the quota inode ILOCK if the xfs iread extents function encounters an error. This results in...

PT-2026-82146

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system during the exchange of two full-file ranges. The function xmi can exchange reflink flags may incorrectly move the reflink inode flag between files...

Linux Distros Unpatched Vulnerability : CVE-2026-80532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix another iunlink infinite loop bug in online fsck xrepiunlinkresolvebucket is supposed to reconstruct as much of the incore prev and next unlinked list...

Linux Distros Unpatched Vulnerability : CVE-2026-80531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: avoid UAF on sc-tempip in xreptempfilecreate LOLLM noticed a potential UAF if the tempfile creation code fails after it set sc-tempip. Fix that...

PT-2026-82147

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the xfs component. This occurs within the xrep tempfile create function if the tempfile creation process fails after the sc-tempip variable has been...

PT-2026-82149

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug exists in the XFS file system during AGI Allocation Group Inode repair. The function xrep iunlink walk ondisk bucket attempts to use sc-sa.agi bp to rebuild unlinked inode lists...

PT-2026-82145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xlog recover dquot commit pass2 function fails to properly handle errors during dquot recovery verification. When xfs dqblk verify detect...

Linux Distros Unpatched Vulnerability : CVE-2026-80537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where th...

Linux Distros Unpatched Vulnerability : CVE-2026-80535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this...

Linux Distros Unpatched Vulnerability : CVE-2026-80529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't swallow dquot recovery verification errors xlogrecoverdquotcommitpass2 validates the recovered dquot with xfsdqblkverify and, on failure, sets error ...

Linux Distros Unpatched Vulnerability : CVE-2026-80536

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read...

CVE-2026-74728

A flaw was found in the Linux kernel's XFS filesystem. When the system attempts to allocate memory for an XFS buffer and that allocation fails, the xfsbuffree function is called with a null buffer address. This leads to a null pointer dereference, causing the kernel to crash. This vulnerability c...

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

SUSE-SU-2026:3781-1 Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...