353 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143096)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143096 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call ntfsbadinode when failing to rename It is safe to call ntfsbadinode on live inodes...
Linux kernel LZNT Decompression Data Compromise
The vulnerability in the decompresslznt function within the fs/ntfs3/lznt.c component of the Linux kernel operating system is related to buffer overflow conditions. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected...
AZL-109007 CVE-2026-98539 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: use dinstantiatenew in ntfscreateinode and murder syzbot's "WARNING in donewmount" saga ntfscreateinode creates a new inode via ntfsnewinode. It hashes it with insertinodelocked and so it's marked as INEW until...
CVE-2026-98539
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: use dinstantiatenew in ntfscreateinode and murder syzbot's "WARNING in donewmount" saga ntfscreateinode creates a new inode via ntfsnewinode. It hashes it with insertinodelocked and so it's marked as INEW until...
CVE-2026-98539
The Linux kernel 's ntfs3 filesystem component contains a vulnerability where ntfs_create_inode() incorrectly interacts with d_instantiate() . Specifically, calling unlock_new_inode() after d_instantiate() causes lockdep_annotate_inode_mutex_key() to reset the i_rwsem count and owner while anothe...
CVE-2026-98539 fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: use dinstantiatenew in ntfscreateinode and murder syzbot's "WARNING in donewmount" saga ntfscreateinode creates a new inode via ntfsnewinode. It hashes it with insertinodelocked and so it's marked as INEW until...
CVE-2026-98539 fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: use dinstantiatenew in ntfscreateinode and murder syzbot's "WARNING in donewmount" saga ntfscreateinode creates a new inode via ntfsnewinode. It hashes it with insertinodelocked and so it's marked as INEW until...
CVE-2026-98539
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: use dinstantiatenew in ntfscreateinode and murder syzbot's "WARNING in donewmount" saga ntfscreateinode creates a new inode via ntfsnewinode. It hashes it with insertinodelocked and so it's marked as INEW until...
Linux Distros Unpatched Vulnerability : CVE-2026-98539
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: use dinstantiatenew in ntfscreateinode and murder syzbot's WARNING in donewmount saga ntfscreateinode creates a new inode via ntfsnewinode. It hashes ...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.15 contains a security vulnerability. This vulnerability stems from the ntfscreate inode function in fs/ntfs3, which calls dinstantiate when the inode is still marked as INEW. As a result, the dentry is hashed during the creation process, and path traversal can lock the...
OESA-2026-4357 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist Index allocation requires at least one bit in the $BITMAP attribute to track usage of inde...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131753)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131753 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix null-ptr-deref on inode-iop in ntfslookup Syzbot reported a null-ptr-deref bug:...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131727)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131727 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the off + sizeofstruct...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131745)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131745 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdrfirstde return value The hdrfirstde function returns a pointer to a struct...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131770)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131770 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check 'folio' pointer for NULL It can be NULL if bmap is called. Tenable has extracted...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131737)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131737 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: don't hold nilock when calling truncatesetsize syzbot is reporting hung task at...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131730)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131730 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use variable length array instead of fixed size Should fix smatch warning: ntfssetlabel...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131736)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131736 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in hdrdeletede Here is a BUG report from syzbot: BUG: KASAN...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131741)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131741 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log-pagemask,bits if log-pagesize changed If an NTFS file system is mounted to...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131747)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131747 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL deref in ntfsupdatemftmirr If ntfsfillsuper wasn't called then sbi-sb will be...