CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

EUVD-2026-45477

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

CVE-2026-63811

Summary of CVE-2026-63811 (Linux kernel, f2fs) : A defect in atomic writes for F2FS can cause a mismatch between the cryptographic context used for decrypted reads and the actual on-disk data, due to how the COW inode and original inode are chosen for page reads. The read path may decrypt data us...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-operator, mapotf, commercial-grafana, crossplane-provider-azure-synapse, skaffold, crossplane-provider-azure-sql, frankenphp-8.4, tekton-pipelines-fips, guac, buildkitd-fips, coder, frankenphp-8.3, cg, kubescape, apko-fips, crossplane-aws-provider, wolfictl,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: commercial-grafana, skaffold, frankenphp-8.4, tekton-pipelines-fips, kubescape, coder, frankenphp-8.3, cloudbeat-fips, opentofu-fips, gitlab-rails-ce, tigera-operator, knative-kafka-broker-fips, prometheus-mongodb-exporter, loki, seaweedfs-rocksdb, tekton-pipelines,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: mapotf, commercial-grafana, skaffold, frankenphp-8.4, tekton-pipelines-fips, guac, kubescape, wolfictl, frankenphp-8.3, cg, apko-fips, cloudbeat-fips, opentofu-fips, syft, gitlab-rails-ce, chainloop-cli, tigera-operator, knative-kafka-broker-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: kubernetes-secret-generator, crossplane-provider-aws-kendra-fips, flux-operator, livekit-cli, kubescape, cg, crossplane-aws-provider, crossplane-provider-aws-ecs, rancher-machine, syft, tigera-operator, sops-fips, terraform-provider-azurerm-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: kubernetes-secret-generator, crossplane-provider-aws-kendra-fips, flux-operator, livekit-cli, kubescape, cg, crossplane-aws-provider, crossplane-provider-aws-ecs, rancher-machine, syft, tigera-operator, sops-fips, terraform-provider-azurerm-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: commercial-grafana, frankenphp-8.4, tekton-pipelines-fips, frankenphp-8.3, opentofu-fips, gitlab-rails-ce, tigera-operator, knative-kafka-broker-fips, prometheus-mongodb-exporter, loki, tekton-pipelines, grafana-fips, knative-serving-fips, terraform, vault-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: act, fulcio, step, cert-manager, k3s, docker-machine-driver-harvester, gitlab-runner, terraform-provider-azurerm, nfpm, steampipe, neuvector-sigstore-interface, caddy, flux-kustomize-controller, glab, ko, rootlesskit, chisel, go-discover, kots, prometheus-operator,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: skaffold, gitlab-kas, opentelemetry-collector, cert-manager, k3s, kubernetes, nerdctl, helm, cilium-cli, flux-image-automation-controller, kubernetes-dashboard, istio, loki, rancher, kubescape, prometheus, cilium, mattermost, chisel, cloud-provider-aws,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: act, step, cert-manager, k3s, docker-machine-driver-harvester, nfpm, caddy, go-discover, kots, prometheus-operator, flux-source-controller, minio, fscrypt, trivy, docker-cli-buildx, trivy-operator, apko, zot, witness, kubernetes, dagger, helm, argo-cd, cilium-cli,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: gitlab-kas, opentelemetry-collector, cert-manager, k3s, kubernetes, nerdctl, helm, cilium-cli, kubernetes-dashboard, istio, loki, rancher, prometheus, podman, cilium, mattermost, buildah, cloud-provider-aws, external-secrets-operator, knative-serving, kots,...

SUSE CVE-2026-46066

In the Linux kernel, the following vulnerability has been resolved: ceph: fix numops off-by-one when crypto allocation fails movedirtyfolioinpagearray may fail if the file is encrypted, the dirty folio is not the first in the batch, and it fails to allocate a bounce buffer to hold the ciphertext...

CVE-2026-46066

A flaw was found in the Linux kernel's Ceph filesystem. When writing to encrypted CephFS files, a failure to allocate a bounce buffer for a dirty folio can lead to an off-by-one error in the numops counter. This inconsistency can cause a kernel panic, resulting in a Denial of Service DoS for the...

CVE-2026-46066

In the Linux kernel, the following vulnerability has been resolved: ceph: fix numops off-by-one when crypto allocation fails movedirtyfolioinpagearray may fail if the file is encrypted, the dirty folio is not the first in the batch, and it fails to allocate a bounce buffer to hold the ciphertext...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after securitysbdelete The function fscryptDestroykeyring must be called after all potentially-encrypted inodes have been evicted; otherwise, it cannot safely destroy the keyring. Since inodes that are...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: fscrypt: stopped using the keyring subsystem for fscryptmasterkey. The approach of having fs/crypto/ manage the fscryptmasterkey structures internally as payloads within “struct key” objects contained in a “struct key” keyring...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ceph: Do not propagate page array placement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each folio...