kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

PT-2026-24704

Уязвимость функции ext4 fs init inode bitmap библиотеки lwext4, связанная с переполнением буфера в куче heap-buffer-overflow при инициализации inode bitmap. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, выполнить произвольный код и вызвать отказ в обслуживании...

PT-2026-24703

Уязвимость функции ext4 bmap bit set библиотеки lwext4, связанная с записью за пределы буфера block bitmap при обработке специально сформированного ext-образа. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, выполнить произвольный код и вызвать отказ в обслуживании...

RHEL 9 : kernel-rt (RHSA-2026:2577)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2577 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 9 : kernel (RHSA-2026:2573)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2573 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: ath9khtc...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Oracle Linux 8 : kernel (ELSA-2026-2264)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2264 advisory. - ext4: fix use-after-free in ext4orphancleanup CKI Backport Bot RHEL-136000 CVE-2022-50673 - ext4: lost matching-pair of trace in ext4truncate CKI...

ALSA-2026:2378 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it CVE-2025-38403 kernel: net: use dstdevrcu in sksetupcaps...

The vulnerabilities of the `ext4_mb_clear_bb()` and `ext4_free_blocks()` functions in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the ext4mbclearbb and ext4freeblocks functions in the Linux operating system’s kernel are related to initialization errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the ext4_iget_extra inode() function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system allows a attacker to gain access to protected information or cause service failures.

The vulnerability of the ext4igetextra inode function in the fs/ext4/inode.c file of the Ext4 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to access protected information or cause servic...

The vulnerability of the ext4_io_end_defer_completion() function in the fs/ext4/page-io.c file of the Ext4 file system of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4ioenddefercompletion function in the fs/ext4/page-io.c file of the Ext4 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the functions ext4_writepage() and mpage_prepare_extent_to_map() in the fs/ext4/inode.c file of the Ext4 file system in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the functions ext4writepage and mpageprepareextenttomap in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause service...

AlmaLinux 8 : kernel-rt (ALSA-2026:2378)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2378 advisory. kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it CVE-2025-38403 kernel: net: use dstdevrcu in sksetupcaps CVE-2025-40170...

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it CVE-2025-38403 kernel: net: use dstdevrcu in sksetupcaps...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...