Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ext4: fixed the issue of possible double unlocking when moving a directory...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fix for the fast commit wait/wake bit mapping on 64-bit systems. On 64-bit systems, ext4’s dynamic inode states are stored in the upper half of the iFlags field. The ext4testinodestate function applies a +32 offset to...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed an uninitialized value in ‘ext4evict inode’. Syzbot identified the following issue: ===================================================== BUG: KMSAN: Uninitialized value in ext4evict inode+0xdd/0x26b0,...

USN-8662-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - STMicroelectronics network drivers;...

ROS-20260821-73-0059

The vulnerability of the ext4getgroupinfo function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260821-73-0050

The vulnerability of the ext4mbreleasegrouppa function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20260821-73-0022

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system is related to the lack of code to verify the return value of this function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

USN-8661-1 linux-azure-5.15, linux-gcp, linux-gcp-fips, linux-hwe-5.15, linux-lowlatency-hwe-5.15 vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

CVE-2026-74308

A flaw was found in the Linux kernel's ext4 filesystem. When the data=journal mount option is enabled, the ext4journalledwriteend function can incorrectly attempt to write inline data. This occurs if a prior attempt to convert inline data to an extent failed, leading to an inconsistent state. An...

CVE-2026-74307

A flaw was found in the Linux kernel's ext4 filesystem. A local attacker can trigger a deadlock by performing an EXT4IOCMOVEEXT ioctl operation with a donor file from a different filesystem during a concurrent freeze operation. This late validation creates a circular lock dependency, leading to a...

CVE-2026-74358

A flaw was found in the ext4 filesystem component of the Linux kernel. On 64-bit systems, an incorrect mapping of wait/wake bits during fast commits could lead to unexpected behavior. This issue, if triggered, may result in system instability or data integrity problems...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101976 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't zero the entire extent if EXT4EXTDATAPARTIALVALID1 When allocating initialized blocks...

Linux Distros Unpatched Vulnerability : CVE-2026-74358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101978)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101978 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where...

USN-8631-4: Linux kernel (Azure CVM) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

The vulnerability in the fs/ext4/extents.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the fs/ext4/extents.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to incomplete recognition of the internal state. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099769 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUGON in ext4mbreleasegrouppa If a malicious fuzzer overwrites the ext4 superblock...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100382)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100382 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4getgroupinfo to fail Previously, ext4getgroupinfo would treat an invalid group...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100098)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100098 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4mbfindbygoal There's issue as follows:...