CVE-2026-80885 afs: Fix uncancelled rxrpc OOB message handler

In the Linux kernel, the following vulnerability has been resolved: afs: Fix uncancelled rxrpc OOB message handler Fix AFS to cancel its OOB message processing typically to respond to security challenges. Also move OOB message processing to afswq so that it's also waited for and make the OOB...

CVE-2026-80881

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix buffer head management in ocfs2readblocks In ocfs2readblocks, caller should't assume that buffer head returned by 'sbgetblk' is exclusively owned and so 'putbh' always drops bcount from 1 to 0. If it is not so, buffer...

EUVD-2026-71509

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2dioendiowrite A circular locking dependency involves INODEALLOCSYSTEMINODE, EXTENTALLOCSYSTEMINODE, and ORPHANDIRSYSTEMINODE. 1. ocfs2mknod acquires INODEALLOC then EXTENTALLOC. 2...

EUVD-2026-71508

In the Linux kernel, the following vulnerability has been resolved: afs: Fix leak of ungot volume Fix afslookupvolumercu so that it doesn't leak a dying volume if afstrygetvolume fails...

CVE-2026-80878 afs: Fix leak of ungot volume

In the Linux kernel, the following vulnerability has been resolved: afs: Fix leak of ungot volume Fix afslookupvolumercu so that it doesn't leak a dying volume if afstrygetvolume fails...

CVE-2026-80878

CVE-2026-80878 is a resource leak in the Linux kernel's AFS (Andrew File System) module. The function afs_lookup_volume_rcu() fails to release a dying volume when the preceding afs_try_get_volume() call fails, resulting in a leak of an ungot volume . The fix is provided in kernel patches (commits...

CVE-2026-80877 afs: Fix vllist leak

In the Linux kernel, the following vulnerability has been resolved: afs: Fix vllist leak Fix a leak of the new vllist in afsupdatecell in the event that it is an empty list nrservers == 0, in which case the old list isn't displaced unless the old list is also empty...

CVE-2026-80877

CVE-2026-80877 is a memory leak in the Linux kernel's AFS (Andrew File System) module. The bug is in afs_update_cell() : when the new server list is empty (nr_servers == 0), the newly allocated vllist is never freed because the old list is only displaced if it is also empty. Each such event leaks...

CVE-2026-80877 afs: Fix vllist leak

In the Linux kernel, the following vulnerability has been resolved: afs: Fix vllist leak Fix a leak of the new vllist in afsupdatecell in the event that it is an empty list nrservers == 0, in which case the old list isn't displaced unless the old list is also empty...

CVE-2026-80869 ntfs: bound the attribute-list entry in ntfs_read_inode_mount()

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfsreadinodemount The $MFT attribute-list walk in ntfsreadinodemount validates each entry only with "u8 alentry + 6 alend" and "u8 alentry + le16tocpualentry-length alend", but then reads...

CVE-2026-80804

In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfstransroll When xfstranscommit fails in xfstransroll, the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection, causing a...

CVE-2026-80808

In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without makin...

AZL-99669 CVE-2026-80806 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

CVE-2026-80860

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 "fuse: clear intrentry in fuseresend and fuseremovependingreq" the WARNON!listempty&req-intrentry in fuserequestfree still triggers due to the following race: ...

CVE-2026-80857

In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for FRFINISHED. If fusedevdowrite is concurrently processing the same...

CVE-2026-80820 xfs: don't livelock in scrub on a circular unlinked list

In the Linux kernel, the following vulnerability has been resolved: xfs: don't livelock in scrub on a circular unlinked list LOLLM points out that online fsck can livelock if an unlinked inode list contains a loop. Use a bitmap to detect cycles...

CVE-2026-80809 ocfs2: fix missing metadata reservation for large xattrs

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large xattrs BUG lsetxattr panics the kernel when setting a large xattr value on a fragmented filesystem where the file already has an external xattr block. CAUSE ocfs2calcxattrsetneed...

CVE-2026-80809 ocfs2: fix missing metadata reservation for large xattrs

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large xattrs BUG lsetxattr panics the kernel when setting a large xattr value on a fragmented filesystem where the file already has an external xattr block. CAUSE ocfs2calcxattrsetneed...

CVE-2026-80809

CVE-2026-80809 affects the Linux kernel's ocfs2 filesystem . The root cause is that ocfs2_calc_xattr_set_need() fails to reserve metadata blocks for a new xattr value's extent tree when the file already has an external xattr block, leaving meta_ac as NULL. On a fragmented filesystem , this causes...

CVE-2026-80809

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large xattrs BUG lsetxattr panics the kernel when setting a large xattr value on a fragmented filesystem where the file already has an external xattr block. CAUSE ocfs2calcxattrsetneed...