5722 matches found
CVE-2026-80808
CVE-2026-80808 affects the Linux kernel ext4 filesystem. The bug is in ext4_xattr_block_set() , which retries indefinitely when an mbcache entry selected for reuse has a saturated reference count (≥ EXT4_XATTR_REFCOUNT_MAX , 1024). Normally this invariant holds because the count and MBE_REUSABLE_...
EUVD-2026-71243
In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without makin...
CVE-2026-80808 ext4: stop retrying saturated xattr cache entries
In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without makin...
CVE-2026-80806 ext4: don't enable DAX on new encrypted files
In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...
CVE-2026-80806
CVE-2026-80806 is a flaw in the Linux kernel's ext4 filesystem where newly created encrypted files could incorrectly have the DAX (Direct Access) flag enabled when the filesystem is mounted with -o dax=always. The root cause is a timing issue in __ext4_new_inode(): the call to ext4_set_inode_flag...
EUVD-2026-71241
In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...
CVE-2026-80806
In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...
CVE-2026-80806 ext4: don't enable DAX on new encrypted files
In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...
PT-2026-85647
In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4 set inode flagsinode, init=true in ext4 new inode is made before EXT4 INODE ENCRYPT is set. As a result, it c...
Linux Distros Unpatched Vulnerability : CVE-2026-80806
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in...
CVE-2026-80808: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without makin...
CVE-2026-80806: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...
PT-2026-85649
In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4 xattr block set retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without...
Linux Distros Unpatched Vulnerability : CVE-2026-80808
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking t...
SUSE CVE-2026-74358
In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of iflags, and ext4testinodestate applies the corresponding +32 offset. The fast-commit wait and wake paths...
The vulnerability of the ext4_mb_scan_groups() function in the fs/ext4/mballoc.c file of the Ext4 file system in the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.
The vulnerability of the ext4mbscangroups function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploitation of this vulnerability could allow an attacker to...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001434)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001434 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse the buffer of the extents path In ext4exttrytomergeup, set path1.pbh to...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001471)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001471 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4extinsertextent As Ojaswin mentioned in Link, in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001404)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001404 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up for an...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001435)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001435 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: drop ppath from ext4extreplayupdateex to avoid double-free When calling...