SUSE CVE-2026-74307

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as the original file. Currently, this validation is performed inside...

SUSE CVE-2026-74308

In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4writeinlinedataend When the data=journal mount option is used, the ext4journalledwriteend function incorrectly calls ext4writeinlinedataend without checking if the EXT4STATEMAYINLINEDATA flag is still...

UBUNTU-CVE-2026-80528

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cache from an MDS reply. An allocation in this section can enter direct...

CVE-2026-80528: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cache from an MDS reply. An allocation in this section can enter direct...

CVE-2026-80528: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cache from an MDS reply. An allocation in this section can enter direct...

PT-2026-82144

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Ceph component where the handle reply function stores a ceph mds request pointer in the current-journal info variable while populating the inode and dentry cache...

PT-2026-82241

Name of the Vulnerable Software and Affected Versions Denx U-Boot versions prior to 2026.04 Description An integer overflow occurs in the ext4fs get bgdtable function. The size calculation can result in an under-allocated buffer, which is subsequently used in memcpy. This flaw may lead to arbitra...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098809 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4fillsuper Th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098946 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't zero the entire extent if EXT4EXTDATAPARTIALVALID1 When allocating initialized blocks...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098780 advisory. In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bugon in jbd2journalgetcreateaccess when file system corrupted There's issue when fil...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098949)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098949 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where...

ROS-20260826-73-0014

The vulnerability of the ext4rename function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098716 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper error handling in ext4readinlinefolio Replace BUGON with proper...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098849)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098849 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entrie...

Vulnerability of functions __ext4_iget() (fs/ext4/inode.c) and swap_inode_boot_loader() (fs/ext4/ioctl.c) in the Ext4 file system of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the ext4iget function fs/ext4/inode.c and the swapinodebootloader function fs/ext4/ioctl.c in the Ext4 file system of the Linux operating system is related to insufficient handling of exceptional conditions. Exploiting this vulnerability can allow an attacker to cause a servi...

The vulnerability of the ext4_ext_map_blocks() function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4extmapblocks function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerabilities of the functions ext4_register_sysfs() and ext4_unregister_sysfs() in the fs/ext4/sysfs.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions ext4registersysfs and ext4unregistersysfs in the fs/ext4/sysfs.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the ext4_feature_set_ok() function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4featuresetok function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system is related to improper validation of consistency in input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the ext4_ext_correct_indexes() function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4extcorrectindexes function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the...

EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-3176)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : USB: core: Limit the length of unkillable synchronous timeoutsCVE-2026-43428 usb: typec: ucsi: validate connector number in...