CVE-2026-97902 fs: don't return -EINVAL for successful nested thaw

In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...

CVE-2026-97902

In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...

CVE-2026-97606 fs: autofs: fix memory leak in autofs_fill_super()

In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofsfillsuper In autofsfillsuper, we create a new inode using autofsnewino, however, if we fail to create rootinode, that is, rootinode failure path, we return -ENOMEM without freeing the new...

CVE-2026-97606

In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofsfillsuper In autofsfillsuper, we create a new inode using autofsnewino, however, if we fail to create rootinode, that is, rootinode failure path, we return -ENOMEM without freeing the new...

CVE-2026-97549 xfs: fix under-reservation of blocks when repairing sf directories

In the Linux kernel, the following vulnerability has been resolved: xfs: fix under-reservation of blocks when repairing sf directories Whilst running QA on XFS for-next as of 7.3-rc2 with MKFSOPTIONS="-n size=8192", I observed the following trimmed dmesg splat: XFS: Assertion failed: args-total =...

CVE-2026-97902

In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...

CVE-2026-97902: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a "fs: handle freezing from multiple devices" replaced the freezeholders bitmask with per-holder counters to allow nested freezes. In the bitmask version, a th...

CVE-2026-98124: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations smb3zerorange, smb3punchhole, smb3insertrange, and smb3collapserange modify file contents through server-side range operations. These operations discard the affected...

ROS-20260925-73-0167

The vulnerability of the fs/ntfs3 component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260925-73-0144

The vulnerability of the ntfsreadmft function in the fs/ntfs3/inode.c module of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-100419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree...

Linux Distros Unpatched Vulnerability : CVE-2026-97902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a fs: handle freezing from multiple devices replaced the freezeholders bitmask with...

ROS-20260925-73-0139

The vulnerability of the f2fswriterawpages function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a remote attacker to cause service failure...

PT-2026-98786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Server-side range operations in the SMB client modify file contents but fail to invalidate the FS-Cache cookie. While the affected page cache is discarded, the valid FS-Cache cookie may...

PT-2026-98800

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs sync fs function unconditionally clears the dirty bit of a volume. This behavior differs from ntfs put super and the remount-read-only...

Linux Distros Unpatched Vulnerability : CVE-2026-93257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: block: handle nogenerate/noverify properly in fs-integrity Check the BIPCHECK flags before...

CVE-2026-98124

In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations smb3zerorange, smb3punchhole, smb3insertrange, and smb3collapserange modify file contents through server-side range operations. These operations discard the affected...

Linux Distros Unpatched Vulnerability : CVE-2026-98135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectorspercluster in the boot sector isbootsectorntfs checks the boot...

CVE-2026-98135

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectorspercluster in the boot sector isbootsectorntfs checks the boot sector's sectorspercluster field with a range test that rejects 0x81..0xf3 but accepts 0 and other non-power-of-two counts. A zero value...

ROS-20260925-73-0080

The vulnerability of the autofscatatonicmode function in the fs/autofs/waitq.c module of the Linux kernel operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...