DEBIAN-CVE-2026-93233

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix callocated underflow on large folio split nouveaudmemfoliofree drops chunk-callocated once per freed folio, while a large compound device-private folio is only counted once when it is allocated. When such a...

CVE-2026-93233

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix callocated underflow on large folio split nouveaudmemfoliofree drops chunk-callocated once per freed folio, while a large compound device-private folio is only counted once when it is allocated. When such a...

UBUNTU-CVE-2026-93233

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix callocated underflow on large folio split nouveaudmemfoliofree drops chunk-callocated once per freed folio, while a large compound device-private folio is only counted once when it is allocated. When such a...

CVE-2026-93794 smb/client: flush dirty data before punching a hole

In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio -f \ -c "pwrite -b 3m -S 0x61 0 3m" \ -c "fpunch 1m 1m" \ -c "seek -h...

CVE-2026-93794 smb/client: flush dirty data before punching a hole

In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio -f \ -c "pwrite -b 3m -S 0x61 0 3m" \ -c "fpunch 1m 1m" \ -c "seek -h...

EUVD-2026-86238

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix callocated underflow on large folio split nouveaudmemfoliofree drops chunk-callocated once per freed folio, while a large compound device-private folio is only counted once when it is allocated. When such a...

CVE-2026-93233

The Linux kernel contains a vulnerability in the drm/nouveau/dmem component where a large (compound) device-private folio split causes a callocated underflow . Specifically, while nouveau_dmem_folio_free() decrements chunk->callocated for every freed folio, the nouveau_dmem_folio_split() hook ...

CVE-2026-93233

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix callocated underflow on large folio split nouveaudmemfoliofree drops chunk-callocated once per freed folio, while a large compound device-private folio is only counted once when it is allocated. When such a...

CVE-2026-93233 drm/nouveau/dmem: fix callocated underflow on large folio split

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix callocated underflow on large folio split nouveaudmemfoliofree drops chunk-callocated once per freed folio, while a large compound device-private folio is only counted once when it is allocated. When such a...

CVE-2026-97155

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...

CVE-2026-97155

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...

CVE-2026-97155

The Fabasoft Folio Client (before 2026), including versions shipped with Fabasoft eGov-Suite , is vulnerable to unauthorized function invocation. The root cause is that the VALIDDOMAINS registry value, intended to restrict web origins, is optional and empty by default, causing the client to trust...

EUVD-2026-85790

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...

CVE-2026-97155

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...

CVE-2026-93233: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix callocated underflow on large folio split nouveaudmemfoliofree drops chunk-callocated once per freed folio, while a large compound device-private folio is only counted once when it is allocated. When such a...

CVE-2026-97155: Origin Validation Error

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...

Linux Distros Unpatched Vulnerability : CVE-2026-93794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio ...

PT-2026-97994

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where punching a hole after a large buffered write may result in the range being incorrectly reported as data. This occurs because a dirty folio spannin...

CVE-2026-93794: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio -f \ -c "pwrite -b 3m -S 0x61 0 3m" \ -c "fpunch 1m 1m" \ -c "seek -h...

PT-2026-98108

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The bfs filesystem fails to properly handle set blocksize failures. Because bfs utilizes buffer heads, it cannot effectively manage block sizes that exceed the PAGE SIZE. This issue lead...