Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146273 advisory. In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: orangefs: The size of the readdir entry is kept as a 64-bit value in the fillfrompart function. The fillfrompart function calculates the size of a directory entry using the sizet type, but stores it as an u32 value. A value close...

SUSE CVE-2026-72033

In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, a...

CVE-2026-72033

A flaw was found in OrangeFS, a file system within the Linux kernel. An integer overflow occurs in the fillfrompart function when calculating the size of a directory entry. This happens because the size is computed as a 64-bit value but stored as a 32-bit value, allowing a large entry length to...

CVE-2026-72033

In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, a...

CVE-2026-72033

In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, a...

UBUNTU-CVE-2026-72033

In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, a...

CVE-2026-72033

In CVE-2026-72033, the Linux kernel vulnerability relates to orangefs in fill_from_part: a directory-entry length was computed as size_t but stored in a __u32, allowing near-U32_MAX values to wrap and bypass the bounds check, leading to an out-of-bounds read that could oops the kernel. The docume...

EUVD-2026-58991

In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, a...

CVE-2026-72033 orangefs: keep the readdir entry size 64-bit in fill_from_part()

In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, a...

CVE-2026-72033: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, a...