CVE-2026-97542 xfs: bail out on bitmap errors in xrep_agfl_fill

In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrepagflfill LOLLM also points out that the xagbbitmapset call in xrepagflfill can fail, but we don't check the result of xagbbitmapwalk, so we silently drop the error and proceed with inconsiste...

CVE-2026-97542

In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrepagflfill LOLLM also points out that the xagbbitmapset call in xrepagflfill can fail, but we don't check the result of xagbbitmapwalk, so we silently drop the error and proceed with inconsiste...

PT-2026-98474

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs filesystem within the free segment range function. The system temporarily reduces MAIN SECSsbi by secs to limit block allocation to a safe area while Garbage...

ROS-20260925-73-0174

The vulnerability of the machidtoggleemumouse function in the drivers/macintosh/machid.c file of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Linux Distros Unpatched Vulnerability : CVE-2026-97542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: bail out on bitmap errors in xrepagflfill LOLLM also points out that the xagbbitmapset call in xrepagflfill can fail, but we don't check the result of...

Linux Distros Unpatched Vulnerability : CVE-2026-93223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error...

Kubernetes Cluster Privilege Escalation

The vulnerability of the Kubernetes cluster management software is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Fleet Server Host Service Identification Processing Bypass

The vulnerability of the identification processing mechanism of the Kibana data visualization service Fleet Server Host is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains security vulnerabilities. These vulnerabilities arise from the fact that when temporary reduction of MAINSECS is performed using freesegmentrange, the idle sections within the truncated range are not deducted from the freesections. As a result, the statistics...

Linux Distros Unpatched Vulnerability : CVE-2026-98138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in syncfs when errors were recorded ntfsputsuper and the...

CVE-2026-98113: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to...

PT-2026-98800

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs sync fs function unconditionally clears the dirty bit of a volume. This behavior differs from ntfs put super and the remount-read-only...

PT-2026-99103

Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo extension versions prior to 3.9.5 Description Improper neutralization of input during web page generation allows Reflected Cross-Site Scripting XSS in the Mediawiki - Cargo extension. This occurs specifically within CargoExpo...

CVE-2026-97542: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrepagflfill LOLLM also points out that the xagbbitmapset call in xrepagflfill can fail, but we don't check the result of xagbbitmapwalk, so we silently drop the error and proceed with inconsiste...

ROS-20260925-73-0023

The vulnerability of the f2fsabortatomicwrite function in the fs/f2fs/segment.c module of the F2FS file system in the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Erlang/OTP Privilege Escalation

The vulnerability of the Erlang/OTP software platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-98113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request...

SUSE CVE-2026-93284

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drmpagemapmigrateunmappages relies on the pages array to determine which pages require DMA unmapping. However, drmpagemapmigrationunlockputpages clears the array as pa...

CVE-2026-93284

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drmpagemapmigrateunmappages relies on the pages array to determine which pages require DMA unmapping. However, drmpagemapmigrationunlockputpages clears the array as pa...

CVE-2026-79759

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...