CVE-2026-97926

In the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group metadata before caching it ufsreadcylinder copies the cylinder group index and the rotor positions straight from the on-disk group and caches them without any check: ucpi-ccgx = fs32tocpusb, ucg-cgcgx...

CVE-2026-97926 ufs: validate cylinder group metadata before caching it

In the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group metadata before caching it ufsreadcylinder copies the cylinder group index and the rotor positions straight from the on-disk group and caches them without any check: ucpi-ccgx = fs32tocpusb, ucg-cgcgx...

CVE-2026-97926

The Linux kernel contains a vulnerability in the ufs filesystem where ufs_read_cylinder() copies cylinder group index and rotor positions from on-disk groups into cache without validation. A crafted image can set these values to trigger out-of-bounds access during allocation or free operations. S...

EUVD-2026-86780

In the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group metadata before caching it ufsreadcylinder copies the cylinder group index and the rotor positions straight from the on-disk group and caches them without any check: ucpi-ccgx = fs32tocpusb, ucg-cgcgx...

CVE-2026-97926

In the Linux kernel, the following vulnerability has been resolved: u...