CVE-2026-68148 fscrypt: Add missing superblock check in find_or_insert_direct_key()

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in findorinsertdirectkey The legacy 'fscryptdirectkeys' table caches master keys that are used by v1 encryption policies that have FSCRYPTPOLICYFLAGDIRECTKEY. It's just a global table for all...

CVE-2026-68148

The CVE relates to the Linux kernel fscrypt component. A missing superblock check in fscrypt_find_or_insert_direct_key() allowed inode keys to be shared across different super_blocks, risking use-after-free of a fscrypt_direct_key and potentially enabling denial of service, information disclosure...

CVE-2026-68147 fscrypt: Avoid dynamic allocation in fscrypt_get_devices()

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscryptgetdevices When a blkcryptokey starts being used or is evicted, fs/crypto/ calls fscryptgetdevices to get the filesystem's list of block devices, then iterates over them and calls...

CVE-2026-68147

Summary: CVE-2026-68147 affects the Linux kernel fscrypt subsystem. When a blk_crypto_key is evicted, the code previously allocated a list of block devices on the heap; allocation failures could lead to premature key free and a use-after-free. The fix switches to an on-stack array to enumerate bl...

CVE-2026-68147 fscrypt: Avoid dynamic allocation in fscrypt_get_devices()

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscryptgetdevices When a blkcryptokey starts being used or is evicted, fs/crypto/ calls fscryptgetdevices to get the filesystem's list of block devices, then iterates over them and calls...

PT-2026-69547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fscrypt component where the fscrypt get devices function uses a dynamically allocated array to store block device pointers. This allocation can fail, particularly...

CVE-2026-68148: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in findorinsertdirectkey The legacy 'fscryptdirectkeys' table caches master keys that are used by v1 encryption policies that have FSCRYPTPOLICYFLAGDIRECTKEY. It's just a global table for all...

Linux Distros Unpatched Vulnerability : CVE-2026-68148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fscrypt: Add missing superblock check in findorinsertdirectkey The legacy 'fscryptdirectkeys' table caches master keys that are used by v1 encryption policies...

CVE-2026-68147: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscryptgetdevices When a blkcryptokey starts being used or is evicted, fs/crypto/ calls fscryptgetdevices to get the filesystem's list of block devices, then iterates over them and calls...

PT-2026-69548

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fscrypt component where the fscrypt direct keys table, used by v1 encryption policies with FSCRYPT POLICY FLAG DIRECT KEY, fails to compare the super block pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-68147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fscrypt: Avoid dynamic allocation in fscryptgetdevices When a blkcryptokey starts being used or is evicted, fs/crypto/ calls fscryptgetdevices to get the...

SUSE CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

EUVD-2026-45477

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

CVE-2026-63811

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

CVE-2026-63811

Summary of CVE-2026-63811 (Linux kernel, f2fs) : A defect in atomic writes for F2FS can cause a mismatch between the cryptographic context used for decrypted reads and the actual on-disk data, due to how the COW inode and original inode are chosen for page reads. The read path may decrypt data us...

CVE-2026-63811: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tigera-operator, frankenphp-8.5, witness, kube-state-metrics, rancher-machine, clickhouse-backup-fips, zot, terraform-fips, crossplane-provider-azure-notificationhubs, kube-conformance, slsa-verifier, gitlab-runner-fips, snyk-cli, pulumi-language-yaml,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: tigera-operator, frankenphp-8.5, kube-state-metrics, zot, kube-conformance, snyk-cli, gitlab-workhorse-ce-fips, flux-fips, mattermost, knative-serving, knative-kafka-broker-fips, flux, gitlab-workhorse-ce, gitea, kyverno-fips, grafana-fips, trivy-operator,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: tigera-operator, frankenphp-8.5, witness, kube-state-metrics, zot, kube-conformance, snyk-cli, pulumi-language-yaml, gitlab-workhorse-ce-fips, flux-fips, mattermost, amazon-ssm-agent-fips, apply-cve-bump, knative-serving, knative-kafka-broker-fips, chainctl-fips,...