10759 matches found
CVE-2026-74349 ocfs2: reject FITRIM ranges shorter than a cluster
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in cluster units, but its too-short range validation only checks sb-sblocksize. On filesystems with a cluster size larger than the block...
EUVD-2026-58960
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid heap allocation for free-cluster readahead state getnrfreeclusters allocates a temporary filerastate before it publishes the precomputed free cluster count, sets NVolFreeClusterKnown, and wakes vol-freewaitq. If that...
CVE-2026-72202 ntfs: avoid heap allocation for free-cluster readahead state
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid heap allocation for free-cluster readahead state getnrfreeclusters allocates a temporary filerastate before it publishes the precomputed free cluster count, sets NVolFreeClusterKnown, and wakes vol-freewaitq. If that...
CVE-2026-72202
Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security trackers for affected products, patches, and remediation status.
CVE-2026-72202 ntfs: avoid heap allocation for free-cluster readahead state
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid heap allocation for free-cluster readahead state getnrfreeclusters allocates a temporary filerastate before it publishes the precomputed free cluster count, sets NVolFreeClusterKnown, and wakes vol-freewaitq. If that...
EUVD-2026-58945
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while allocating clusters can drop the last reference to the temporary attribute inode. Evicting that inode drops its reference to the base inode...
CVE-2026-72164
CVE-2026-72164: Linux kernel OCFS2 fix for moving extents to occupied clusters. The issue occurred during non-auto OCFS2_IOC_MOVE_EXT: a probe could leave a caller-controlled goal unchanged or misreport free runs, allowing data to be written into a cluster still owned by another inode. The patch ...
CVE-2026-72159 ocfs2: reject non-inline dinodes with i_size and zero i_clusters
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...
PT-2026-72785
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 file system where the ocfs2 trim mainbm function improperly validates FITRIM ranges. The function trims the global bitmap in cluster units but only checks th...
PT-2026-72390
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the get nr free clusters function performs a heap allocation for a temporary file ra state before publishing the precomputed free cluster count,...
PT-2026-72375
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while allocating clusters can drop the last reference to the temporary attribute inode. Evicting that inode drops its reference to the base inode...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, flux-kustomize-controller, postgres-operator, sbomqs, flux-source-controller, mountpoint-s3-csi-driver, ollama, gostatsd, seaweedfs, terraform-provider-kubernetes, loki, pgtimetable, percona-server-mongodb-operator, argo-workflows,...
CVE-2026-56859 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, flux-kustomize-controller, postgres-operator, sbomqs, flux-source-controller, mountpoint-s3-csi-driver, ollama, gostatsd, seaweedfs, terraform-provider-kubernetes, loki, pgtimetable, percona-server-mongodb-operator, argo-workflows,...
GO-2026-6089 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, flux-kustomize-controller, postgres-operator, pgpool2exporter, vcluster, crossplane-provider-azure-sql, flux-source-controller, kubewatch, rclone, ferretdb, flyte, kube-fluentd-operator, victoriametrics-operator, scorecard, helm,...
CVE-2026-56853 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, flux-kustomize-controller, postgres-operator, pgpool2exporter, vcluster, crossplane-provider-azure-sql, flux-source-controller, kubewatch, rclone, ferretdb, flyte, kube-fluentd-operator, victoriametrics-operator, scorecard, helm,...
CVE-2026-56860 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, flux-kustomize-controller, postgres-operator, sbomqs, flux-source-controller, regclient, mountpoint-s3-csi-driver, ollama, frp, gostatsd, nri-elasticsearch, seaweedfs, nfpm, terraform-provider-kubernetes, k3d, loki, pgtimetable,...
GO-2026-6218 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, flux-kustomize-controller, postgres-operator, sbomqs, flux-source-controller, regclient, mountpoint-s3-csi-driver, ollama, frp, gostatsd, nri-elasticsearch, seaweedfs, nfpm, terraform-provider-kubernetes, k3d, loki, pgtimetable,...
GO-2023-2043 vulnerabilities
Vulnerabilities for packages: kind, metrics-server, kubeflow-katib...