CVE-2026-23157

CVE-2026-23157 is a Linux kernel vulnerability affecting the btrfs metadata writeback path. The issue occurs in the balance between dirty pages and a cgroup/global dirty limit, where an internal 32 MiB threshold for btrfs btree inode writeback prevents progress when the cgroup’s dirty pages excee...

CVE-2026-23157 btrfs: do not strictly require dirty metadata threshold for metadata writepages

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system hang and trigger...

CVE-2026-23157

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system hang and trigger...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the overly strict threshold for dirty page requirements during metadata write operations,...

Linux Distros Unpatched Vulnerability : CVE-2026-23157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the...

Exploit for Improper Initialization in Linux Linux_Kernel

markdown Chrono-Drip: Temporal Viscosity Exploitation Frame...

Exploit for Race Condition in Canonical Ubuntu_Linux

kernel-exploit-dirtycow-project-subm Dirty COW Privilege Escal...

Exploit for Improper Initialization in Linux Linux_Kernel

Naive detector and reproducer of CVE-2022-0847 dirty pipe. Use...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix data-race and null-ptr-deref in jbd2journaldirtymetadata Since handle-htransaction may be a NULL pointer, so we should change it to call ishandleabortedhandle first before dereferencing it. And the following data-race w...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in markinodedirty An use-after-free issue occurred when markinodedirty get the bdiwriteback that was in the progress of switching. CPU: 1 PID: 562 Comm: systemd-random- Not tainted...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005097 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to don't dirty inode for readonly filesystem syzbot reports f2fs bug as below: kernel B...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-26990)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26990 advisory. - In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Write-protect L2...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38220)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38220 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data...

Azure Linux 3.0 Security Update: kernel (CVE-2024-40952)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40952 advisory. - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in...

kernel-exploit-dirtycow-project

...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000949)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000949 advisory. Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001077 advisory. The tracewritebackdirtypage implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001400)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001400 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in removedirtysegment in fs/f2fs/segment.c when mounting an f2fs image...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002800 advisory. Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002885 advisory. The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmdmkdirty in the touchpmd function inside the THP implementation. touchpmd can be reached by...