CVE-2026-43188

CVE-2026-43188 affects the Linux kernel in the Ceph writeback path when fscrypt is enabled. The issue arises in move_dirty_folio_in_page_array() failing to allocate bounce buffers for encrypted folios and the shared rc variable being overwritten by ceph_process_folio_batch(); this could propagate...

CVE-2026-43188 ceph: do not propagate page array emplacement errors as batch errors

In the Linux kernel, the following vulnerability has been resolved: ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each foli...

PT-2026-37528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Ceph component where page array emplacement errors are incorrectly propagated as batch errors. When fscrypt is enabled, the move dirty folio in page array function...

CVE-2026-43188: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enabled, movedirtyfolioinpagearray may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each foli...

CVE-2026-31714: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid memory leak in f2fsrename syzbot reported a f2fs bug as below: BUG: memory leak unreferenced object 0xffff888127f70830 size 16: comm "syz.0.23", pid 6144, jiffies 4294943712 hex dump first 16 bytes: 3c af 57 72...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011087 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to have encrypt flag Mounting a filesystem whose journal inode ha...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, external-secrets-operator, zot, dask-gateway, cilium-cli, telegraf, go, spire-server, gitaly, kube-fluentd-operator, fuse-overlayfs-snapshotter, cilium, istio, kots, kaf, kyverno, mattermost, external-dns, kubernetes, kubescape, gitlab-pages...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: tigera-operator, kube-state-metrics, zot, buildkite-agent-fips, kube-conformance, snyk-cli, gitlab-workhorse-ce-fips, calico, flux-fips, kubernetes-csi-node-driver-registrar-fips, knative-serving, mattermost, aws-load-balancer-controller-fips, flux,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: tigera-operator, kube-state-metrics, zot, buildkite-agent-fips, kube-conformance, snyk-cli, gitlab-workhorse-ce-fips, calico, flux-fips, kubernetes-csi-node-driver-registrar-fips, knative-serving, mattermost, aws-load-balancer-controller-fips, flux,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: chartmuseum-fips, pulumi-language-yaml, wal-g, cluster-autoscaler, scorecard, aws-flb-firehose, newrelic-fluent-bit-output-fips, rancher-agent, nats-server, beats, amazon-ecs-cni-plugins-fips, libnvidia-container-fips, harbor-fips, helm-exporter, flux-operator-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: chartmuseum-fips, pulumi-language-yaml, wal-g, cluster-autoscaler, scorecard, aws-flb-firehose, newrelic-fluent-bit-output-fips, rancher-agent, nats-server, beats, amazon-ecs-cni-plugins-fips, libnvidia-container-fips, harbor-fips, helm-exporter, flux-operator-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: deck-fips, chartmuseum-fips, secrets-store-csi-driver-provider-aws, harbor-scanner-trivy, kyverno-policy-reporter-plugins-trivy-fips, rancher-pushprox, crossplane-provider-aws-cloudwatchlogs-fips, pulumi-language-yaml, bank-vaults, wal-g, aws-node-termination-handler...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: rancher-pushprox, bank-vaults, db-operator, falco-exporter-fips, pluto, scorecard, fleet-server-fips, rancher-agent, rqlite-fips, json-exporter, cluster-api-gcp-controller-fips, aws-eks-pod-identity-agent-fips, flannel-cni-plugin-fips, kustomize, helm-docs,...

Azure Linux 3.0 Security Update: kernel (CVE-2024-43859)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43859 advisory. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate preallocated block...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003086 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscryptdopagecrypto in fs/crypto/crypto.c when operating on a fil...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003389 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscryptdopagecrypto in fs/crypto/crypto.c when operating on a fil...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992190 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Free memory for tmpfile name When opening a ubifs tmpfile on an encrypted directory,...

SUSE CVE-2025-68297

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in processv2sparseread for encrypted directories The crash in processv2sparseread for fscrypt-encrypted directories has been reported. Issue takes place for Ceph msgr2 protocol in secure mode. It can be reproduced...

CVE-2025-68297

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in processv2sparseread for encrypted directories The crash in processv2sparseread for fscrypt-encrypted directories has been reported. Issue takes place for Ceph msgr2 protocol in secure mode. It can be reproduced...

CVE-2025-68297

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in processv2sparseread for encrypted directories The crash in processv2sparseread for fscrypt-encrypted directories has been reported. Issue takes place for Ceph msgr2 protocol in secure mode. It can be reproduced...