Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: qibfs: fixed another leak. Failure to allocate inode = data was leaked from dentry… This issue existed since the initial merge; to be fair, if we end up with an OOM situation, the chances of failure occurring at that specific...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fixed a slab-out-of-bounds issue in efivarfsdcompare. This issue was observed in kernel version 6.6 present on master as well. Bugs: - KASAN: Slab-out-of-bounds in memcmp+0x98/0xd0 - Call trace: kasancheckrange+0xe8/0x1...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fixed a race condition that occurred due to concurrent opens during the rename2 operation. In addition to sending the rename request to the server, the rename process also involves closing any deferred closes, waitin...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “spufs”: fixed a leak related to the failure of spufsnewfile. This issue is triggered from spufsfilldir, and the caller of that function will call spufsrmdir in case of failure. This action removes everything we’ve managed to...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005077 advisory. In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name -dname.name can change on rename and the earlier...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005093 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized...

openSUSE 16 Security Update : kernel (Live Patch 2 for SUSE Linux Enterprise 16) (openSUSE-SU-2026:20097-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20097-1 advisory. This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: - CVE-2025-40212:...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39494)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39494 advisory. - In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22073)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22073 advisory. - In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufsnewfile failur...

Azure Linux 3.0 Security Update: kernel (CVE-2025-23150)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23150 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in dosplit...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49870)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49870 advisory. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000640)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000640 advisory. fs/overlayfs/copyup.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service dentry reference le...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003873 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Fix an Oops in nfsdautomount When mounting from a NFSv4 referral, path-dentry can end up bei...

f2fs: invalidate dentry cache on failed whiteout creation

...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002135 advisory. fs/overlayfs/copyup.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service dentry reference le...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001828 advisory. fs/overlayfs/copyup.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service dentry reference le...

CVE-2025-71069

In the Linux kernel, the following vulnerability has been resolved: f2fs: invalidate dentry cache on failed whiteout creation F2FS can mount filesystems with corrupted directory depth values that get runtime-clamped to MAXDIRHASHDEPTH. When RENAMEWHITEOUT operations are performed on such...

kernel: smb: client: fix race with concurrent opens in rename(2)

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename2 Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as well as marking all...

kernel: smb: client: fix race with concurrent opens in rename(2)

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename2 Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as well as marking all...

SUSE CVE-2025-71069

In the Linux kernel, the following vulnerability has been resolved: f2fs: invalidate dentry cache on failed whiteout creation F2FS can mount filesystems with corrupted directory depth values that get runtime-clamped to MAXDIRHASHDEPTH. When RENAMEWHITEOUT operations are performed on such...