SUSE-SU-2026:4363-1 Security update for libtpms

This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

PT-2026-98108

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The bfs filesystem fails to properly handle set blocksize failures. Because bfs utilizes buffer heads, it cannot effectively manage block sizes that exceed the PAGE SIZE. This issue lead...

PT-2026-98104

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The omfs module fails to properly handle set blocksize failures. This occurs because omfs utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

PT-2026-98106

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The JFS file system fails to properly handle set blocksize failures. This occurs because JFS utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

PT-2026-98109

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The affs file system fails to properly handle set blocksize failures. This occurs because affs utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

CVE-2026-95958 JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch ...

SUSE-SU-2026:23878-1 Security update for libtpms

This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: romfs: Check the return value of sbsetblocksize. The romfsfillsuper function ignores the return value of sbsetblocksize, which may fail if the requested block size is incompatible with the block device’s configuration. This issue...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ntfs: Set a dummy block size to “read bootblock” when mounting. During mounting, sb-sblocksize is used to read the bootblock without being defined or validated. Set a dummy block size before attempting to read the bootblock. The...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed a memory leak in ext4fillsuper. The buffer head references must be released before calling killbdev;. Otherwise, the buffer head and the page referenced by bdata will not be freed by killbdev, and subsequently, tha...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the return result of sbminblocksize Syzkaller reports a bug named “UBSAN: shift-out-of-bounds in squashfsbioread”. Syzkaller forks multiple processes. After mounting the Squashfs filesystem, it issues an...

PT-2026-64543

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UDF file system implementation where the udf load sparable map function incorrectly treats the reallocationTableLen variable as a byte count instead of an entry...

SUSE CVE-2026-53130

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

CVE-2026-53130

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

EUVD-2026-38998

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

CVE-2026-53130 fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

CVE-2026-53130

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

CVE-2026-53130 fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized ssysblocksize values PAGESIZE, but it does not reject values smaller than OMFSDIRSTART 0x1b8 = 440. Later, omfsmakeempty uses sbi-ssysblocksi...

PT-2026-52024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unsigned underflow occurs in the omfs make empty function when processing a crafted filesystem image. The omfs fill super function fails to reject s sys blocksize values smaller than...

CVE-2026-46061

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix deadlock in jbd2journalcancelrevoke Commit f76d4c28a46a "fs/jbd2: use sleeping version of findgetblock" changed jbd2journalcancelrevoke to use findgetblocknonatomic which holds the folio lock instead of iprivatelock. Th...