CVE-2026-53244

The CVE-2026-53244 issue concerns the Linux kernel VFS path handling in nfds4_create_file(). A race/ordering problem occurred when a filesystem uses ->atomic_create: if atomic_create() returns an error, end_creating() could unlock the parent with a bad/dentry reference because the dentry handl...

EUVD-2026-39195

In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4createfile atomiccreate in fs/namei.c drops the reference to the dentry when it returns an error. This behaviour was imported into dentrycreate so that it will drop the reference if an...

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the handling of LFS object uploads. An attacker can overwrite existing LFS objects across different repositories by uploading objects with the same identifier, potentially leading to...