CVE-2026-98279

A flaw was found in the Linux kernel's Btrfs file system. A local user can cause a denial of service DoS by enabling file verification fsverity on a subvolume that exceeds its quota or storage space limits. When the operation fails due to insufficient space, the clean-up process fails to acquire...

CVE-2026-74596

A flaw was found in the Linux kernel's fsverity subsystem. The vulnerability is due to the removal of a check in the setattrprepare function, which previously verified if fs-verity was enabled. This change allows fsverity files to be truncated even when the fs-verity feature is not active on the...

CVE-2026-74590

A flaw was found in the Linux kernel's fsverity subsystem. A local attacker could exploit a race condition in the bpfgetfsveritydigest function by concurrently modifying its digestsize argument. This could lead to a system crash, resulting in a denial of service...

SUSE CVE-2026-74590

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents of...

CVE-2026-74590

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents of...

UBUNTU-CVE-2026-74590

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents of...

CVE-2026-74590

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents of...

EUVD-2026-64533

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...

CVE-2026-74596 fs,fsverity: remove check for fsverity being enabled in setattr_prepare()

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...

EUVD-2026-64527

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents of...

CVE-2026-74590

CVE-2026-74590 is a race condition in the Linux kernel's fsverity subsystem, specifically in the bpf_get_fsverity_digest() function. The BPF verifier and dynptr abstraction guarantee memory validity but not content stability; kfuncs must remain memory-safe under concurrent modifications. This fun...

CVE-2026-74590 fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents of...

CVE-2026-74590 fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents of...

Linux Distros Unpatched Vulnerability : CVE-2026-74590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains...

PT-2026-79601

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr prepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case...

PT-2026-79595

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf get fsverity digest function where it incorrectly assumes the stability of memory contents referenced by a dynptr a BPF dynamic pointer abstraction. While the...

Linux Distros Unpatched Vulnerability : CVE-2026-74596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems...

CVE-2026-74596: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...

CVE-2026-74590: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents of...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fsverity: The FSIOCENABLEVERITY function is rejected when called on a file descriptor in mode 3. Commit 56124d6c87fd “fsverity: support enabling with tree block size fmode & FMODEREAD condition in kernelread became reachable...