Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

The vulnerability of the ntfs_get_bh() function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfsgetbh function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the log_replay() function in the fs/ntfs3/fslog.c file of the NTFS file system in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the logreplay function in the fs/ntfs3/fslog.c file of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the hfscorrect_next_unused_CNID() function in the fs/hfs/catalog.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hfscorrectnextunusedCNID function in the fs/hfs/catalog.c module of the Linux operating system’s kernel relates to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ntfs_read_ea() function in the fs/ntfs3/xattr.c module of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfsreadea function in the fs/ntfs3/xattr.c module of the NTFS file system in the Linux operating system is related to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the miEnumattr() function in the fs/ntfs3/record.c module of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the miEnumattr function in the fs/ntfs3/record.c module of the NTFS file system in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the `legacy_load_cluster_from_disk()` function in the `fs/erofs/zmap.c` file of the EROFS file system, a core component of the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the legacyloadclusterfromdisk function in the fs/erofs/zmap.c file of the EROFS file system’s kernel in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the ni_clear() function in the fs/ntfs3/frecord.c module of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the niclear function in the fs/ntfs3/frecord.c module of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the exfat_allocate_bitmap() function in the fs/exfat/balloc.c module of the exFAT file system for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the exfatallocatebitmap function in the fs/exfat/balloc.c file of the exFAT file system in Linux’s operating system is related to the lack of checking for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2021-27448

A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...

The vulnerability of the nfsd4decode_compound() function in the fs/nfsd/nfs4xdr.c module, which supports the Network File System in Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nfsd4decodecompound function in the fs/nfsd/nfs4xdr.c module, which supports the NFS network file system in Linux kernels, is related to the occurrence of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the downgradeentrynext_c() function in the fs/bcachefs/sb-downgrade.c module, which is part of the bcachefs file system support for Linux kernels, allows a attacker to trigger a service failure.

The vulnerability of the downgradeentrynextc function in the fs/bcachefs/sb-downgrade.c module of the bcachefs file system support for Linux operating systems is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xfs_trans_alloc_dir() function in the fs/xfs/xfs_trans.c module of the Linux file system support module allows a attacker to cause a service failure.

The vulnerability of the xfstransallocdir function in the fs/xfs/xfstrans.c module of the Linux file system support module is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ntfs_fill_super() function in the fs/ntfs3/super.c module of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ntfsfillsuper function in the fs/ntfs3/super.c file of the NTFS file system in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

GO-2026-4816 NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs

NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs...

CVE-2026-33531

CVE-2026-33531 affects InvenTree prior to 1.2.6. A path traversal vulnerability in the report template engine allows a staff-level user to read arbitrary server files via crafted template tags in report.py (encode_svg_image(), asset(), uploaded_image()). Exploitation requires staff access to uplo...

CVE-2026-33631 ClearanceKit: opfilter policy bypass via non-open file operations

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

CVE-2026-33486

Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions 2.7.9, 2.6.28, 2.5.44, and 2.3.42 allows an authenticated attacker to read any file on the server's local file system that the web...

CVE-2026-28892

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of the file system...

CVE-2026-28825

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of the file system...