CVE-2026-99135

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix infinite loop on discard with large tag size When integritymetadata handles a discard, it fills a buffer with DISCARDFILLER and writes it over the tags, maxblocks blocks at a time. If the kmalloc fails, the buff...

CVE-2026-99135 dm-integrity: fix infinite loop on discard with large tag size

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix infinite loop on discard with large tag size When integritymetadata handles a discard, it fills a buffer with DISCARDFILLER and writes it over the tags, maxblocks blocks at a time. If the kmalloc fails, the buff...

CVE-2026-99135

The Linux kernel contains a vulnerability in dm-integrity where handling a discard operation with a large tag size can trigger an infinite loop . The issue occurs when kmalloc fails and the system falls back to the checksums_onstack array; if the tag size exceeds HASH_MAX_DIGESTSIZE, max_blocks b...

EUVD-2026-111887

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix infinite loop on discard with large tag size When integritymetadata handles a discard, it fills a buffer with DISCARDFILLER and writes it over the tags, maxblocks blocks at a time. If the kmalloc fails, the buff...

CVE-2026-99108

The Linux kernel 's ntfs filesystem driver contains a vulnerability in the ntfs_trim_fs() function related to FITRIM range alignment . When a free extent's start is not discard-aligned, the function improperly derives the discard length by aligning the original extent length down. This calculatio...

CVE-2026-99108 ntfs: fix FITRIM range alignment

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix FITRIM range alignment ntfstrimfs aligns the start of a free extent up to the device discard granularity, but derives the discard length by aligning the original extent length down. When the free extent start is not...

EUVD-2026-112008

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix FITRIM range alignment ntfstrimfs aligns the start of a free extent up to the device discard granularity, but derives the discard length by aligning the original extent length down. When the free extent start is not...

PT-2026-128101

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix FITRIM range alignment ntfs trim fs aligns the start of a free extent up to the device discard granularity, but derives the discard length by aligning the original extent length down. When the free extent start is not...

PT-2026-128128

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix infinite loop on discard with large tag size When integrity metadata handles a discard, it fills a buffer with DISCARD FILLER and writes it over the tags, max blocks blocks at a time. If the kmalloc fails, the...

npm: ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render

npm: ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting content render vulnerability discovered by ? in WordPress npm sanitize-html versions 2.18.0...

CVE-2026-69076

Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are...

CVE-2026-69076 Apache Kylin: Unauthorized cross-project job discard

Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are...

CVE-2026-69076

Apache Kylin versions 4 through 5.0.4 are vulnerable to an Exposure of Job Discard to an Unauthorized Actor vulnerability. This flaw allows unauthorized entities to trigger job discards, primarily impacting services directly exposed to the public network. Impact is minimal for internal deployment...

EUVD-2026-103149

Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are...

CVE-2026-69076

Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are...

CVE-2026-69076 Apache Kylin: Unauthorized cross-project job discard

Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are...

PT-2026-116151

Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are...

CVE-2026-69076: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are...

Apache Kylin information disclosure vulnerability

Vulnerabilities related to information disclosure exist in Apache Kylin versions 4 through 5.0.4. These vulnerabilities arise because unauthorized users can access Job Discard, potentially leading to the leakage of sensitive information...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In ext4, the work related to queued discard operations is always drained in ext4mbrelease. While reviewing the recent ext4 patch1, Sashiko raised the following concern2: If the file system is initially mounted with the discard...