K000164139: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-53016 In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AFALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccpaescomplete restores AESBLOCKSIZE bytes into the caller's IV buffer...

Important: kernel-rt bug fix and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Bug Fixes and Enhancements: gfs2: gfs2glockhold assertion failure AlmaLinux-8 JIRA:RHEL-291229...

ALSA-2026:93670 Important: kernel-rt bug fix and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Bug Fixes and Enhancements: gfs2: gfs2glockhold assertion failure AlmaLinux-8 JIRA:RHEL-291229...

CVE-2026-97520

A flaw was found in the Linux kernel's GFS2 Global File System 2 file system. A local user could exploit this flaw by mounting a specially crafted filesystem image, causing an iterator progression error during quota initialization in the gfs2quotainit function. Successful exploitation could lead ...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1793362651)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1793362651 advisory. - In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2qddealloc gfs2qddealloc,...

Oracle Linux 8 : kernel (ELSA-2026-85773)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85773 advisory. - smb: client: reject a tree connect response whose byte count is too small CKI Backport Bot RHEL-271288 CVE-2026-89631 - netfilter: flowtable: hold...

Oracle Linux 8 : kernel (ELSA-2026-87375)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87375 advisory. - vfio/pci: clear vdev-msiperm after freeing it on init failure Rodolfo Vick RHEL-270905 CVE-2026-89777 - ALSA: seq: close a re-opened queue timer in...

Amazon Linux 2 : gfs2-utils (ALAS-2026-4004)

The version of gfs2-utils installed on the remote host is prior to 3.1.10-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4004 advisory. A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with a...

Important: gfs2-utils

Issue Overview: A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes...

ROS-20261023-73-0042

The vulnerability in gfs2-utils relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261023-73-0043

The vulnerability in gfs2-utils is related to unlimited resource allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CLSA-2026-1773832495 Fix of 132 CVEs

CVE-2023-53515 - virtio-mmio: don't break lifecycle of vmdev CVE-2023-53515 CVE-2025-39967 - fbcon: fix integer overflow in fbcondosetfont CVE-2025-39967 - fbcon: Fix OOB access in font allocation CVE-2025-39967 CVE-2025-38702 - fbdev: fix potential buffer overflow in doregisterframebuffer...

kernel security, bug fix, and enhancement update

4.18.0-553.176.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2qddealloc gfs2qddealloc, invoked as an RCU callback from gfs2qddispose, accesses the superblock object sdp via qd-qdsbd after freeing qd. It does this to decrement sdquotacount and wake up...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent NULL pointer dereferencing during unmount When flushing out outstanding glock work during an unmount, gfs2logflush may be called after sdp-sdjdesc has already been deallocated and sdp-sdjdesc is NULL. Commit...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate idepth for exhash directories A fuzzer test introduced corruption that ends up with a depth of 0 in direread, causing an undefined shift by 32 at: index = hash 32 - dip-idepth; As calculated in an open-coded way in...

ROS-20261016-73-0005

The vulnerability of the gfs2evict inode function in the fs/gfs2/super.c module of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix kernel NULL pointer dereference in gfs2rgrpdump Syzkaller has reported a NULL pointer dereference when accessing rgd-rdrgl in gfs2rgrpdump. This can occur when creating rgd-rdgl fails in readrindexentry. Add a NULL...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fixed possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in gfs2showoptions: val = sdp-sdtune.gtlogdsecs; if val != 30 seqprintfs,...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: gfs2: The use-of-free variable issue in gfs2glockshrinkscan has been fixed. The GLFLRU flag is checked under lrulock in gfs2glockremovefromlru, to remove a glock from the lru list in gfs2glockput. During the shrink scan process,...