CVE-2026-93269 ext4: fix circular lock dependency in ext4_ext_migrate

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

CVE-2026-93268 ext4: skip extra isize expansion during mount to prevent deadlock

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handle. During mount !SBACTIVE, the expand path may move xattrs to externa...

CVE-2026-93268 ext4: skip extra isize expansion during mount to prevent deadlock

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handle. During mount !SBACTIVE, the expand path may move xattrs to externa...

CVE-2026-93252 ocfs2: fix circular locking dependency in ocfs2_init_acl()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93252

The Linux kernel contains a circular locking dependency within the ocfs2 filesystem in the ocfs2_init_acl() function. The deadlock occurs between &oi->ip_xattr_sem and &journal->j_trans_barrier. Specifically, Path 1 (setxattr) acquires ip_xattr_sem before starting a transaction (acquiring j...

CVE-2026-93252 ocfs2: fix circular locking dependency in ocfs2_init_acl()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

EUVD-2026-86124

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

gridplayer (0.5.4), twitch-play (>=0.2.2, <=0.2.3) potentially affected by CVE-2026-92164 via streamlink (>=8.0.0, <=8.4.0)

streamlink PYPI version =8.0.0, =0.2.2, =0.2.3 Source cves: CVE-2026-92164 Source advisory: GHSA-VF2X-4V53-PM7V...

tg-autoposter (2.4.2) potentially affected by CVE-2026-92164 via streamlink (3.2.0)

streamlink PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.2 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

tg-autoposter (2.4.4) potentially affected by CVE-2026-92164 via streamlink (4.0.1)

streamlink PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - tg-autoposter 2.4.4 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

MAL-2026-17159 Malicious code in simple-date-formatter-new-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f295d4208d67cbb14c8804b287109ad5ed7946e39f0256e601f846e485c6c54 [email protected] presents itself as a date-formatting utility but ships a trivial three-line stub while its package.json postinstal...

Malicious code in simple-date-formatter-new-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f295d4208d67cbb14c8804b287109ad5ed7946e39f0256e601f846e485c6c54 [email protected] presents itself as a date-formatting utility but ships a trivial three-line stub while its package.json postinstal...

MAL-2026-17156 Malicious code in aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61479316af4cfc0884dfe88744a0ed14fa64e052471cc216667c80502689860 postinstall.js runs automatically on npm install and reads os.hostname and os.userInfo.username, then issues an https.get to a hardcoded webhook.site...

Malicious code in aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61479316af4cfc0884dfe88744a0ed14fa64e052471cc216667c80502689860 postinstall.js runs automatically on npm install and reads os.hostname and os.userInfo.username, then issues an https.get to a hardcoded webhook.site...

MAL-2026-17153 Malicious code in @birbalo/aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6392dad6c7467b1d2b75c329d517982f061f3ca0792b8879b72127813d26aa8 The npm package @birbalo/[email protected] ships a postinstall.js lifecycle script that runs automatically on npm install. The script imports the...

Malicious code in @birbalo/aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6392dad6c7467b1d2b75c329d517982f061f3ca0792b8879b72127813d26aa8 The npm package @birbalo/[email protected] ships a postinstall.js lifecycle script that runs automatically on npm install. The script imports the...

@5ss/ai-tools (>=2.11.1, <=2.11.3), @aem-screens/franklin-variation-creator (1.0.0-B001) +252 more potentially affected by CVE-2026-97151 via mammoth (>=1.3.6, <=1.12.1)

mammoth NPM version =1.3.6, =2.11.1, =0.9.1, =3.4.1, =0.0.1, =1.0.0, =0.5.5, =0.0.9, =0.1.5, =1.1.0, =1.2.1, =0.1.13, =0.1.14 - @catmasks/free-editor 1.0.1 and more Source cves: CVE-2026-97151 Source advisory: MEND:CVE-2026-97151...

CVE-2026-93269: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

CVE-2026-93252: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93252

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...