SUSE CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

EUVD-2026-45477

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

CVE-2026-63811

Summary of CVE-2026-63811 (Linux kernel, f2fs) : A defect in atomic writes for F2FS can cause a mismatch between the cryptographic context used for decrypted reads and the actual on-disk data, due to how the COW inode and original inode are chosen for page reads. The read path may decrypt data us...

CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: terraform, mattermost-fips, nerdctl, containerd, fscrypt, podman, calico-fips, rancher, vitess, prometheus, aactl, kyverno-fips, elastic-agent-fips, argo-workflows, podman-fips, opentofu-fips, frankenphp-8.2, snyk-cli, cloud-provider-aws, spire-server, k3s,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: gitea-fips, skaffold-fips, terraform, nfpm, dagger, kubevela-fips, mattermost-fips, nerdctl, containerd, fscrypt, podman, argocd-image-updater-fips, wolfictl, kubescape-server, calico-fips, nuclei, trivy-operator, grype-db, gomplate, vitess, cloudbeat,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: coder, gitea-fips, skaffold-fips, terraform, kubevela-fips, mattermost-fips, nerdctl, containerd, fscrypt, argocd-image-updater-fips, kubescape-server, calico-fips, trivy-operator, rancher, vitess, cloudbeat, prometheus, aactl, kyverno-fips, elastic-agent-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: coder, crossplane-provider-azure-servicenetworking, gitea-fips, skaffold-fips, terraform, nfpm, crossplane-provider-azure-storagesync, dagger, kubevela-fips, slsa-verifier, caddy, ksops, mattermost-fips, nerdctl, containerd, neuvector-sigstore-interface-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, gitea-fips, ksops, crossplane-provider-aws-s3-fips, crossplane-provider-aws-acm-fips, elastic-agent, crossplane-fips, crossplane-provider-aws-bedrockagent-fips, crossplane-provider-aws-sqs-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, gitea-fips, ksops, crossplane-provider-aws-s3-fips, crossplane-provider-aws-acm-fips, elastic-agent, crossplane-fips, crossplane-provider-aws-bedrockagent-fips, crossplane-provider-aws-sqs-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cert-manager, kots, flux-source-controller, nerdctl, k3s, kubernetes-dashboard, cilium-cli, istio, osv-scanner, cloud-provider-aws, kubernetes, flux, helm, trivy, skaffold, zarf, aactl, kaf, flux-image-automation-controller, gitea, k9s, gitlab-kas,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, docker, terragrunt, age, tkn, rancher-machine, terraform-provider-azurerm, buildah, dagger, kaf, scorecard, gitea, external-secrets-operator, pulumi-kubernetes-operator, flux-notification-controller, atlantis, witness, minio, kyvern...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: terragrunt, buildah, dagger, kaf, scorecard, gitea, external-secrets-operator, pulumi-kubernetes-operator, witness, minio, kyverno, snyk-cli, guac, kubescape, gomplate, docker-cli-buildx, kine, cert-manager, kots, openbao, step-kms-plugin, nerdctl, k3s,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cert-manager, kots, nerdctl, k3s, kubernetes-dashboard, cilium-cli, istio, cloud-provider-aws, kubernetes, flux, helm, buildah, aactl, kaf, opentelemetry-collector, gitlab-kas, prometheus-operator, telegraf, spire-server, zot, fscrypt, containerd, rancher, minio,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Ceph: fixed a crash in processv2sparseread for encrypted directories. A crash in processv2sparseread for fscrypt-encrypted directories has been reported. This issue occurs in the Ceph msgr2 protocol in secure mode. It can be...

SUSE CVE-2026-46066

In the Linux kernel, the following vulnerability has been resolved: ceph: fix numops off-by-one when crypto allocation fails movedirtyfolioinpagearray may fail if the file is encrypted, the dirty folio is not the first in the batch, and it fails to allocate a bounce buffer to hold the ciphertext...

CVE-2026-46066

A flaw was found in the Linux kernel's Ceph filesystem. When writing to encrypted CephFS files, a failure to allocate a bounce buffer for a dirty folio can lead to an off-by-one error in the numops counter. This inconsistency can cause a kernel panic, resulting in a Denial of Service DoS for the...

CVE-2026-46066

In the Linux kernel, the following vulnerability has been resolved: ceph: fix numops off-by-one when crypto allocation fails movedirtyfolioinpagearray may fail if the file is encrypted, the dirty folio is not the first in the batch, and it fails to allocate a bounce buffer to hold the ciphertext...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: fscrypt: stopped using the keyring subsystem for fscryptmasterkey. The approach of having fs/crypto/ manage the fscryptmasterkey structures internally as payloads within “struct key” objects contained in a “struct key” keyring...