130 matches found
CVE-2026-52791
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
CVE-2026-52791 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
CVE-2026-52791 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
CVE-2026-52791
Fuse-overlayfs (overlayfs in FUSE for rootless containers) before version 1.17 on the release-1.x C branch preserves SUID/SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file. This may allow a low-privilege process to leave the upper-layer file with mode 4777. T...
CVE-2026-52791 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
CVE-2026-52791
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
Linux Distros Unpatched Vulnerability : CVE-2026-52791
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in...
PT-2026-65846
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openO TRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
container-tools:ol8 security, bug fix, and enhancement update
aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-3 - rebuild for CVE-2025-68121 - Resolves: RHEL-149262 cockpit-podman 84.1-1 - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 - Related: Jira:RHEL-25557 conmon...
CVE-2026-46680 vulnerabilities
Vulnerabilities for packages: tigera-operator, k3s, rancher, k8sgpt, helm-push, newrelic-infrastructure-agent, teleport, kubevela, rancher-helm, neuvector-scanner, helm-set-status, chartmuseum, kubescape, zarf, grype, helm, opa-envoy, headlamp, kots, docker-compose, manifest-tool, docker,...
CVE-2026-46680 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, helm-exporter-fips, cloudbeat-fips, zarf-fips, kubevela-fips, redpanda-operator, packer-fips, k8ssandra-client, xeol-fips, buildkitd-fips, headlamp, amazon-ecs-agent, google-osconfig-agent, syft-fips, cloudbeat, neuvector, amazon-ecs-agent-fips,...
SUSE CVE-2026-31465
In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...
EUVD-2026-24809
In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...
CVE-2026-31465
CVE-2026-31465 in the Linux kernel concerns the writeback path for filesystems without data integrity guarantees (e.g., fuse). The fix adds a SB_I_NO_DATA_INTEGRITY superblock flag; when set, sync kicks off writeback of dirty inodes but does not wait for flusher threads to finish. The change move...
PT-2026-34370
In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB I NO DATA INTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set...
GHSA-W4GW-W5JQ-G9JH vulnerabilities
Vulnerabilities for packages: k3s, gitness, wuzz, fuse-overlayfs-snapshotter, aws-load-balancer-controller, runc, k8s-device-plugin...
GHSA-W4GW-W5JQ-G9JH vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, backup-restore-operator, rke2-runtime-fips, etcd-fips, cilium-envoy-fips, gendesk, k3s, wuzz, etcd, fuse-overlayfs-snapshotter, runc, gitness, aws-load-balancer-controller, cilium-envoy, localstack, terraform, k8s-device-plugin, kube-conformance,...
CVE-2025-47911 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, backup-restore-operator, rke2-runtime-fips, etcd-fips, cilium-envoy-fips, gendesk, k3s, wuzz, etcd, fuse-overlayfs-snapshotter, runc, gitness, aws-load-balancer-controller, cilium-envoy, localstack, terraform, k8s-device-plugin, kube-conformance,...
CVE-2025-58190 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, backup-restore-operator, rke2-runtime-fips, etcd-fips, cilium-envoy-fips, gendesk, k3s, wuzz, etcd, fuse-overlayfs-snapshotter, runc, gitness, aws-load-balancer-controller, cilium-envoy, localstack, terraform, k8s-device-plugin, kube-conformance,...