USN-8015-3 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; - iouring subsystem; CVE-2025-38561, CVE-2025-39698, CVE-2025-40019...

CVE-2026-24928

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-24928

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-24928

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-5676

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-24928

CVE-2026-24928 is an out-of-bounds write vulnerability in the file system module. Affected component details are not specified in the provided documents. CVSS 3.1 base score 5.8 (MEDIUM) with LOCAL attack vector, HIGH attack complexity, NO privileges required, UI interaction required, and confide...

CVE-2026-24928

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-24928

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An out-of-bounds write vulnerability exists in the Huawei EMUI and Huawei HarmonyOS file system module, which can...

The vulnerability of the ext4destroyInline_data_nolock() function in the fs/ext4/inline.c file of the Linux operating system’s Ext4 file system allows a attacker to cause a service failure.

The vulnerability of the ext4destroyInlinedatanolock function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...

PT-2026-6714

Name of the Vulnerable Software and Affected Versions versions prior to 2026-24928 Description An out-of-bounds write issue exists in the file system module. Successful exploitation could impact service confidentiality. Recommendations At the moment, there is no information about a newer version...

The vulnerability of the `txInit()` function in the `fs/jfs/jfs_txnmgr.c` file of the JFS file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the txInit function in the fs/jfs/jfstxnmgr.c file of the JFS file system in Linux operating systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ext4_prepareInline_data() function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4prepareInlinedata function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-23053

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a deadlock involving nfsreleasefolio Wang Zhaolong reports a deadlock involving NFSv4.1 state recovery waiting on kthreadd, which is attempting to reclaim memory by calling nfsreleasefolio. The latter cannot make progres...

SUSE CVE-2026-23109

In the Linux kernel, the following vulnerability has been resolved: fs/writeback: skip ASNODATAINTEGRITY mappings in waitsbinodes Above the while loop in waitsbinodes, we document that we must wait for all pages under writeback for data integrity. Consequently, if a mapping, like fuse,...

Important: nodejs20

Issue Overview: Bypass File System Permissions using crafted symlinks CVE-2025-55130 A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the vm module with the timeout option. Under specific timing conditions, buffers allocated...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8016-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8016-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8015-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8015-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

The vulnerability of the ext4_xattr_move_to_block() function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4xattrmovetoblock function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause service...

The vulnerability of the `txBegin()` function in the JFS file system module `fs/jfs/jfs_txnmgr.c` of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the txBegin function in the JFS file system module fs/jfs/jfstxnmgr.c of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...