GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: tigera-operator, crossplane-provider-aws-rds-fips, jfrog-cli, aactl, crossplane-provider-aws-cloudwatch-fips, helmfile, cosign, crossplane-provider-aws-cloudsearch-fips, longhorn-cli-fips, melange, crossplane-provider-aws-ssm, chezmoi,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: tigera-operator, frankenphp-8.4, argo-events, istio, jfrog-cli, loki, aactl, nfpm, grype-db, flux-source-controller-fips, amazon-ssm-agent-fips, chainctl-fips, minio-fips, cloud-provider-aws, frankenphp-8.5, dagger, flux, guac, melange, snyk-cli, chezmoi,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: tigera-operator, frankenphp-8.4, istio, loki, aactl, cloud-provider-aws, frankenphp-8.5, flux, snyk-cli, commercial-grafana, zot, tekton-pipelines-fips, prometheus-operator, omnictl-multiarch, mattermost, argo-workflows-fips, commercial-kyverno, podman-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: minio, nfpm, argocd-image-updater, terraform-provider-tls, ksops, kots, pulumi, istio, argo-cd, sops, opentofu, pulumi-language-yaml, rancher, crossplane-provider-azure-managedidentity, apko, policy-controller, mattermost, steampipe, docker-cli-buildx, k9s,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: minio, flux-image-automation-controller, nerdctl, cilium-cli, argocd-image-updater, containerd, flux-source-controller, osv-scanner, helm, cert-manager, prometheus, prometheus-operator, aactl, kots, flux, trivy-operator, istio, opentelemetry-collector,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: minio, nfpm, argocd-image-updater, kots, pulumi, istio, argo-cd, opentofu, pulumi-language-yaml, rancher, apko, mattermost, docker-cli-buildx, k9s, pulumi-kubernetes-operator, cloud-provider-aws, openbao, pulumi-language-dotnet, chezmoi, cert-manager, rancher-agent,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: minio, nerdctl, cilium-cli, containerd, helm, cert-manager, prometheus, prometheus-operator, buildah, aactl, kots, flux, istio, opentelemetry-collector, external-secrets-operator, kine, kyverno, rancher, kubernetes, zot, gitlab-kas, external-dns, cilium, telegraf,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Ceph: Fixed a crash in processv2sparseread for encrypted directories. A crash in processv2sparseread for fscrypt-encrypted directories has been reported. This issue occurs in the Ceph msgr2 protocol in secure mode. It can be...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ceph: Fix for numops off-by-one when crypto allocation fails The movedirtyfolioinpagearray function may fail if the file is encrypted, if the dirty folio is not the first in the batch, and if it fails to allocate a bounce buffer ...

SUSE CVE-2026-46066

In the Linux kernel, the following vulnerability has been resolved: ceph: fix numops off-by-one when crypto allocation fails movedirtyfolioinpagearray may fail if the file is encrypted, the dirty folio is not the first in the batch, and it fails to allocate a bounce buffer to hold the ciphertext...

CVE-2026-46066

A flaw was found in the Linux kernel's Ceph filesystem. When writing to encrypted CephFS files, a failure to allocate a bounce buffer for a dirty folio can lead to an off-by-one error in the numops counter. This inconsistency can cause a kernel panic, resulting in a Denial of Service DoS for the...

CVE-2026-46066

In the Linux kernel, the following vulnerability has been resolved: ceph: fix numops off-by-one when crypto allocation fails movedirtyfolioinpagearray may fail if the file is encrypted, the dirty folio is not the first in the batch, and it fails to allocate a bounce buffer to hold the ciphertext...

AZL-88704 CVE-2026-46066 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ceph: fix numops off-by-one when crypto allocation fails movedirtyfolioinpagearray may fail if the file is encrypted, the dirty folio is not the first in the batch, and it fails to allocate a bounce buffer to hold the ciphertext...

CVE-2026-46066: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ceph: fix numops off-by-one when crypto allocation fails movedirtyfolioinpagearray may fail if the file is encrypted, the dirty folio is not the first in the batch, and it fails to allocate a bounce buffer to hold the ciphertext...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ceph: Do not propagate page array placement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each folio...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: fscrypt: fixed an underflow issue during left shift when inode-iblkbits PAGESHIFT When simulating an nvme device on qemu with both logicalblocksize and physicalblocksize set to 8 KiB, an error trace appears during partition...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash after fscryptencryptpagecacheblocks error The function movedirtyfolioinpagearray was created by the commit ce80b76dd327 "ceph: introduce cephprocessfoliobatch method". The code for this function was moved from...

Linux Distros Unpatched Vulnerability : CVE-2026-43188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate...

CVE-2026-43188

In the Linux kernel, the following vulnerability has been resolved: ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each foli...

CVE-2026-43188 ceph: do not propagate page array emplacement errors as batch errors

In the Linux kernel, the following vulnerability has been resolved: ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each foli...