Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: fscrypt: fixed an underflow issue during left shift when inode-iblkbits PAGESHIFT When simulating an nvme device on qemu with both logicalblocksize and physicalblocksize set to 8 KiB, an error trace appears during partition...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: memory leaks have been fixed in ext4fnamesetupfilename,preparelookup. If filename case-folding fails, memory will be leaked from the fscryptname structure, specifically from the 'cryptobuf.name' member. Make sure that this...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash after fscryptencryptpagecacheblocks error The function movedirtyfolioinpagearray was created by the commit ce80b76dd327 "ceph: introduce cephprocessfoliobatch method". The code for this function was moved from...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: ubifs: Memory freed for the tmpfile name When opening a ubifs tmpfile in an encrypted directory, the function fscryptsetupfilename allocates memory for the name that will be stored in the directory entry. However, after the name ...

Linux Distros Unpatched Vulnerability : CVE-2026-43188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate...

CVE-2026-43188

In the Linux kernel, the following vulnerability has been resolved: ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each foli...

CVE-2026-43188 ceph: do not propagate page array emplacement errors as batch errors

In the Linux kernel, the following vulnerability has been resolved: ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each foli...

CVE-2026-43188 ceph: do not propagate page array emplacement errors as batch errors

In the Linux kernel, the following vulnerability has been resolved: ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each foli...

CVE-2026-43188

CVE-2026-43188 affects the Linux kernel in the Ceph writeback path when fscrypt is enabled. The issue arises in move_dirty_folio_in_page_array() failing to allocate bounce buffers for encrypted folios and the shared rc variable being overwritten by ceph_process_folio_batch(); this could propagate...

PT-2026-37528

In the Linux kernel, the following vulnerability has been resolved: ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, move dirty folio in page array may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011087 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to have encrypt flag Mounting a filesystem whose journal inode ha...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: coredns, gitlab-kas, kubernetes-csi-node-driver-registrar, ingress-nginx-controller, cert-manager, k3s, gitlab-pages, gitaly, kubernetes, k8s-device-plugin, falco-no-driver, nerdctl, redka, karpenter, argo-cd, cilium-cli, kubernetes-dashboard, hubble,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: beats, etcd, aws-load-balancer-controller-fips, libnvidia-container, jaeger-fips, k8s-device-plugin, argo-workflows-fips, fscrypt, gitlab-rails-ce-fips, cluster-autoscaler-fips, nemo, flux-source-watcher, gitlab-workhorse-ce-fips, kyverno, elastic-agent-fips, zot,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: beats, etcd, aws-load-balancer-controller-fips, libnvidia-container, jaeger-fips, k8s-device-plugin, argo-workflows-fips, fscrypt, gitlab-rails-ce-fips, cluster-autoscaler-fips, nemo, flux-source-watcher, gitlab-workhorse-ce-fips, kyverno, elastic-agent-fips, zot,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: kubevela-fips, vault-benchmark, kube-state-metrics, cilium-envoy-fips, prometheus-podman-exporter-fips, timoni, grafana-fips, flux-source-controller, kubernetes-dashboard, kubescape-server, syncthing, gitlab-pages, vault-csi-provider, jaeger, prometheus-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: kubevela-fips, vault-benchmark, kube-state-metrics, cilium-envoy-fips, prometheus-podman-exporter-fips, timoni, grafana-fips, flux-source-controller, kubernetes-dashboard, kubescape-server, syncthing, gitlab-pages, vault-csi-provider, jaeger, prometheus-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: falco-exporter-fips, flannel-fips, grafana-beyla, nova-fips, s5cmd, grafana-agent-operator, pushprox, cloud-sql-proxy, kubevela-fips, aws-network-policy-agent-fips, custom-pod-autoscaler-operator-fips, timestamp-authority-fips, vault-benchmark,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: falco-exporter-fips, nova-fips, cloud-sql-proxy, timestamp-authority-fips, vault-benchmark, thanos-receive-controller, grafana-rollout-operator, whereabouts-fips, cilium-envoy-fips, prometheus-podman-exporter-fips, verticadb-operator, k6-operator, hello-world-golang,...

Azure Linux 3.0 Security Update: kernel (CVE-2024-43859)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43859 advisory. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate preallocated block...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003086 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscryptdopagecrypto in fs/crypto/crypto.c when operating on a fil...