CVE-2026-93076

A flaw was found in the Linux kernel's Direct Access DAX subsystem. When a static DAX device is reconfigured, an outdated memory mapping value can persist. This prevents the system from correctly building its virtual memory map, which is essential for proper operation. This issue could lead to...

CVE-2026-93075

A flaw was found in the Linux kernel's dax/fsdev component. When a static device is unbound, the pgmap operations and owner are not properly cleared. This can lead to a use-after-free vulnerability where a subsequent memory failure event might dispatch through a stale or freed handler, potentiall...

CVE-2026-93074

A flaw was found in the Linux kernel's dax/fsdev component. An error in calculating kernel virtual addresses within the fsdevdaxdirectaccess function, specifically for multi-range devices with physical gaps, can lead to incorrect memory addressing. This issue could result in memory corruption,...

CVE-2026-93073

A flaw was found in the Linux kernel's Direct Access DAX subsystem. A race condition in the daxholdernotifyfailure function allows a concurrent operation to clear a critical pointer holderops between two reads. This can lead to a null pointer dereference, potentially enabling a local attacker to...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fsdax: The infinite loop in daxiomaprw has been fixed. I encountered an infinite loop and a warning message when executing the tail command in virtiofs. Warning: CPU: 10; PID: 964; Location: fs/iomap/iter.c:34,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/mminit: Fixed the issue where uninitialized struct pages were used for ZONEDEVICE. If DAX memory is hot-plugged into an unoccupied subsection of an early section, sectionactivate reuses the unoptimized boot memmap. However,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix an issue where overflowing extents beyond the inode size occurs during partial writing. The daxiomaprw function does two things in each iteration: it maps the written blocks and copies user data to those blocks. If...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfs: fixed a resource leak in xfsallocbuftarg In the error path, fsputdax is called to release the DAX device reference...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dax: Fixed the issue where daxmappingrelease was called after the free operation. A test using CONFIGDEBUGKOBJECTRELEASE to remove a device-related dax region e.g., using modprobe -r daxhmem results in the following output:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: device-dax: The pgoff alignment in daxsetmapping should use ALIGNDOWN instead of ALIGN. Otherwise, vmf-address, which is not aligned with faultsize, will be aligned to the next alignment, which can lead to memory failures due ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: fuse: Fixed the issue of leaking the invalidate lock when opening an OTRUNC DAX operation fails. The fuseopen function calls filemapinvalidatelock for a DAX truncate daxtruncate = true and releases it before the outinodeunlock...

CVE-2026-98259

A flaw was found in the Linux kernel. A local user could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. In the Direct Access DAX subsystem, the kernel fails to verify whether storage entries are zero or empty before converting them, leading to an invalid memor...

Linux Distros Unpatched Vulnerability : CVE-2026-98259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enable...

CVE-2026-80856

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. A local user could trigger a lock leak within the fusedosetattr function during a Direct Access DAX truncate operation. If a writeback flush fails, a critical lock is not properly released, causing subsequent file...

CVE-2026-80855

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. A local user could exploit this by opening a file with the OTRUNC flag, which attempts to truncate the file. If a signal interrupts the Direct Access DAX page invalidation process during this operation, a lock can be...

SUSE CVE-2026-98259

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...

DEBIAN-CVE-2026-98259

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...

CVE-2026-98259

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...

CVE-2026-98259

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...

UBUNTU-CVE-2026-98259

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling daxtofolio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling daxtofolio on...