SUSE CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

EUVD-2026-45477

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

CVE-2026-63811

Summary of CVE-2026-63811 (Linux kernel, f2fs) : A defect in atomic writes for F2FS can cause a mismatch between the cryptographic context used for decrypted reads and the actual on-disk data, due to how the COW inode and original inode are chosen for page reads. The read path may decrypt data us...

CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, terragrunt-fips, istio, aactl, commercial-grafana, external-dns, skaffold, zarf, reports-server, splunk-otel-collector, spire-server, apply-cve-bump, grype-fips, trivy-operator, frankenphp-8.4, kots, mattermost, zot, osv-scanner,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, istio, aactl, coder, commercial-grafana, external-dns, skaffold, zarf, reports-server, spire-server, trivy-operator, frankenphp-8.4, kots, mattermost, zot, osv-scanner, drone, chisel, flux-image-automation-controller-fips, trivy-operator-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: istio, terraform-provider-acme-fips, crossplane-provider-aws-scheduler, kots, cloudflared-fips, drone, gitlab-pages, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-kms-fips, gitlab-runner, caddy, crossplane-provider-aws-acm-fips, minio-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, terragrunt-fips, istio, step-kms-plugin, aactl, consul-fips, coder, commercial-grafana, external-dns, skaffold, vault, fulcio-fips, zarf, reports-server, splunk-otel-collector, spire-server, apply-cve-bump, grype-fips, trivy-operator, frankenphp-8....

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, istio, aactl, commercial-grafana, external-dns, reports-server, spire-server, frankenphp-8.4, kots, mattermost, zot, cert-manager, docker-cli-buildx-fips, loki, knative-serving-fips, external-secrets-operator-fips, elastic-agent-fips, opentofu-fips...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: istio, terraform-provider-acme-fips, crossplane-provider-aws-scheduler, kots, cloudflared-fips, drone, gitlab-pages, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-kms-fips, gitlab-runner, caddy, crossplane-provider-aws-acm-fips, minio-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitlab-kas, kubescape, telegraf, fscrypt, snyk-cli, argocd-image-updater, spire-server, knative-serving, kyverno, flux, flux-image-automation-controller, kubernetes-dashboard, zarf, prometheus-operator, containerd, kots, zot, aactl, external-dns, cert-manager, gitea,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kubescape, flux-notification-controller, teleport, terraform-provider-azurerm, fscrypt, pulumi, snyk-cli, step-issuer, falcoctl, grype, flux-image-automation-controller, podman, kots, step, cosign, sops, cert-manager, gitea, steampipe, crossplane-provider-azure-sql,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, gitlab-kas, telegraf, fscrypt, snyk-cli, spire-server, knative-serving, kyverno, flux, kubernetes-dashboard, prometheus-operator, containerd, podman, kots, zot, aactl, external-dns, cert-manager, cilium-cli, prometheus, kaf, rancher, k3s, cilium,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: kubescape, fscrypt, pulumi, snyk-cli, step-issuer, grype, flux-image-automation-controller, podman, kots, step, cert-manager, gitea, helm, guac, skaffold, argo-events, kine, istio, gptscript, scorecard, step-kms-plugin, spire-server, knative-serving, flux, opentofu,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Ceph: fixed a crash in processv2sparseread for encrypted directories. A crash in processv2sparseread for fscrypt-encrypted directories has been reported. This issue occurs in the Ceph msgr2 protocol in secure mode. It can be...

SUSE CVE-2026-46066

In the Linux kernel, the following vulnerability has been resolved: ceph: fix numops off-by-one when crypto allocation fails movedirtyfolioinpagearray may fail if the file is encrypted, the dirty folio is not the first in the batch, and it fails to allocate a bounce buffer to hold the ciphertext...

CVE-2026-46066

A flaw was found in the Linux kernel's Ceph filesystem. When writing to encrypted CephFS files, a failure to allocate a bounce buffer for a dirty folio can lead to an off-by-one error in the numops counter. This inconsistency can cause a kernel panic, resulting in a Denial of Service DoS for the...

CVE-2026-46066

In the Linux kernel, the following vulnerability has been resolved: ceph: fix numops off-by-one when crypto allocation fails movedirtyfolioinpagearray may fail if the file is encrypted, the dirty folio is not the first in the batch, and it fails to allocate a bounce buffer to hold the ciphertext...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: fscrypt: stopped using the keyring subsystem for fscryptmasterkey. The approach of having fs/crypto/ manage the fscryptmasterkey structures internally as payloads within “struct key” objects contained in a “struct key” keyring...