CVE-2026-72377

Summary of CVE-2026-72377 : In the Linux kernel, a defect in AFS handling caused symlinks and mountpoints to incorrectly inherit AS_RELEASE_ALWAYS due to afs_apply_status(), even though they use afs_dir_aops which have no release_folio callback. This mismatch allowed memory management code to mis...

CVE-2026-72375 afs: Fix reinitialisation of the inode, in particular ->lock_work

In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in particular -lockwork It seems that initalising afsvnode::lockwork a single time in the slab's init function isn't sufficient for workstructs. This results in the DEBUGOBJECTS debugging...

EUVD-2026-59273

In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incomi...

CVE-2026-72375

CVE-2026-72375 affects the Linux kernel and relates to the AFS subsystem. The issue arises from insufficient reinitialisation of afs_vnode::lock_work (and related lock_work handling) during inode allocation, causing intermittent warnings from debugobjects (e.g., “activate not available” messages ...

CVE-2026-72374

The CVE affects the Linux kernel AFS client: a bug in callback message parsing caused -EAGAIN to be swallowed (instead of being propagated by afs_extract_data), potentially impacting availability. The fix corrects the callback service message parsers to pass through -EAGAIN. CVSS 3.1 base score 7...

EUVD-2026-59274

In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in particular -lockwork It seems that initalising afsvnode::lockwork a single time in the slab's init function isn't sufficient for workstructs. This results in the DEBUGOBJECTS debugging...

CVE-2026-72372 afs: Fix lack of locking around modifications of net->cells_dyn_ino

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net-cellsdynino Fix the lack of locking around modifications of net-cellsdynino by taking net-cellslock exclusively. This also requires to cell to be removed from net-cellsdynino i...

CVE-2026-72369 minix: avoid overflow in bitmap block count calculation

In the Linux kernel, the following vulnerability has been resolved: minix: avoid overflow in bitmap block count calculation minixchecksuperblock uses minixblocksneeded to verify that the on-disk imap and zmap block counts are large enough for the advertised inode and zone counts. The helper...

EUVD-2026-59268

In the Linux kernel, the following vulnerability has been resolved: minix: avoid overflow in bitmap block count calculation minixchecksuperblock uses minixblocksneeded to verify that the on-disk imap and zmap block counts are large enough for the advertised inode and zone counts. The helper...

CVE-2026-72369

CVE-2026-72369 (Minix) - detail summary : The Linux kernel vulnerability arises in minix_check_superblock() where minix_blocks_needed() uses unsigned DIV_ROUND_UP(), allowing s_ninodes/s_zones near UINT_MAX to wrap to zero, making a zero bitmap-block count appear valid. This can lead to dereferen...

CVE-2026-72369 minix: avoid overflow in bitmap block count calculation

In the Linux kernel, the following vulnerability has been resolved: minix: avoid overflow in bitmap block count calculation minixchecksuperblock uses minixblocksneeded to verify that the on-disk imap and zmap block counts are large enough for the advertised inode and zone counts. The helper...

CVE-2026-72211

The CVE concerns the Linux kernel NTFS handling in ntfs_ir_reparent(), where a root stub may grow beyond the resident index root value. The code can publish a larger index header (index_length/allocated_size) before resizing the resident value, so if a resize fails with ENOSPC, recovery paths may...

EUVD-2026-58966

In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfsealookup and ntfslistxattr, this verifies that there is enough space in the EA entry before accessing the nextentryoffset field of the EA entry...

CVE-2026-72206

The CVE-2026-72206 entry concerns the Linux kernel NTFS index block validation. A stricter validation was added for INDEX_HEADER geometry in INDX blocks via ntfs_index_block_inconsisent(), and ntfs_lookup_inode_by_name() was updated to use this validation. This fixes a vulnerability in how INDX b...

CVE-2026-72206 ntfs: validate index block header more strictly

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfsindexblockinconsisent to perform stricter validation of INDEXHEADER geometry in INDX blocks, and update ntfslookupinodebyname to use that function to validate INDX blocks...

CVE-2026-72205

The CVE-2026-72205 entry concerns a Linux kernel ntfs mount failure leak: on fill_super error paths, vol-owned allocations (nls_map, volume_label) and lcn_empty_bits_per_page were not freed, leading to per‑mount leaks until module unload. The issue affects ntfs_fill_super() and err_out_now paths,...

CVE-2026-72203

CVE-2026-72203 concerns the Linux kernel NTFS driver and describes a deadlock (ABBA) between extent_lock and extent mrec_lock triggered by writes to normal extents and the $MFT folio. The fix removes all extent_lock and extent mrec_lock acquisitions from the MFT folio writeback path, eliminating ...

EUVD-2026-58960

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid heap allocation for free-cluster readahead state getnrfreeclusters allocates a temporary filerastate before it publishes the precomputed free cluster count, sets NVolFreeClusterKnown, and wakes vol-freewaitq. If that...

CVE-2026-72201 ntfs: validate index entries on reading

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in thos...

EUVD-2026-58959

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in thos...