PT-2026-34354

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext4 ext correct indexes function, which corrects index entries when the first extent in a leaf is modified. The function fails to validate that the p idx pointer...

PT-2026-34352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext4 file system where the kernel fails to reject mounting when bigalloc is used in conjunction with s first data block not equal to 0, a configuration that is not...

The vulnerability of the ext4_alloc_inode() function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4allocinode function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pagepool: Fix use-after-free in pagepoolrecycleinring CVE-2025-38129 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a null-ptr access in the cursor snooper CVE-2025-40110 In th...

Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM 7.5.0 UP15 Vulnerability Details CVEID:CVE-2022-50673 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4orphancleanup I caught a issue as follows...

Security Bulletin: Technical Support Appliance - potential denial of service conditions in underlying Linux kernel

Summary Multiple vulnerabilities have been identified in the Linux kernel affecting subsystems such as ext4 filesystem, IPv6 networking, framebuffer console, and other optional components e.g., Bluetooth, RDMA, NFS, NVMe, USB audio. These issues primarily involve race conditions, use-after-free...

The vulnerability of the ext4_rename() function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4rename function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ext4_clu_mapped() function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4clumapped function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Oracle Linux 7 : kernel (ELSA-2026-3685)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3685 advisory. - ext4: fix use-after-free in ext4orphancleanup CVE-2022-50673 Orabug: 39036029 - Squashfs: check return result of sbminblocksize CVE-2025-38415 Orabug...

USN-8116-1: Linux kernel (Intel IoTG Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - ATM...

The vulnerability of the ext4_load_journal() function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4loadjournal function in the fs/ext4/super.c file of the Ext4 file system in the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attrloadrunsrange on inconsistent metadata CVE-2025-71265 In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indxfind to avoid...

The vulnerability of the ext4_validate_block_bitmap() function in the fs/ext4/balloc.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4validateblockbitmap function in the fs/ext4/balloc.c module of the Ext4 file system in the Linux operating system is related to the lack of validation for resource format correctness. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the dx_probe() function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system is related to the lack of code to verify the return value of this function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the parse_apply_sb_mount_options() function in the fs/ext4/super.c module of the Ext4 file system of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the parseapplysbmountoptions function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could all...

Unbreakable Enterprise kernel security update

6.12.0-109.67.6 - net: tunnel: make skbvlaninetprepare return drop reasons Menglong Dong Orabug: 39027305 6.12.0-109.67.5 - uek-rpm: fixed specs to explicitly call python3 as set as a requirement Mark Nicholson Orabug: 38933158 - Revert 'net/rds: fix crash by expanding kref coverage to...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1280)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : nvme: nvme-fc: Ensure -ioerrwork is cancelled in nvmefcdeletectrlCVE-2025-40261 cifs: fix session state check in reconnect to avoid use-after-free...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1244)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : nvme: nvme-fc: Ensure -ioerrwork is cancelled in nvmefcdeletectrlCVE-2025-40261 cifs: fix session state check in reconnect to avoid use-after-free...

The vulnerability of the ext4_ext_migrate() function in the fs/ext4/migrate.c file of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4extmigrate function in the fs/ext4/migrate.c file of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the `make_indexed_dir()` function in the `fs/ext4/namei.c` file of the Ext4 file system’s kernel in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the makeindexeddir function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...