CVE-2026-98267

The Linux kernel contains a vulnerability in the 9p filesystem protocol within the v9fs_issue_write() function. The issue occurs because the kernel failed to correctly update i_size and remote_i_size to the new size of a server file when the file was enlarged. The fix involves using the start fpo...

EUVD-2026-93195

In the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fsissuewrite to update isize and remoteisize Fix v9fsissuewrite to update isize and remoteisize to the new size of the server file if we made it larger, using the start fpos and the count returned by p9clientwrite to...

CVE-2026-89840

CVE-2026-89840 is a vulnerability in the Linux kernel's f2fs filesystem affecting the F2FS_IOC_MOVE_RANGE ioctl. The ioctl validates the source range but fails to check the destination end before updating i_size. When a source hole is present, __clone_blkaddrs() skips NULL_ADDR entries and return...

Linux Distros Unpatched Vulnerability : CVE-2026-89840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: validate MOVERANGE destination size F2FSIOCMOVERANGE checks the source range, but not the destination end before updating isize. A source hole can expose...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative isize value. Add a check when opening this file to avoid subsequent operation failures...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nbd: Fixed incomplete validation of ioctl arguments. We identified an alarm caused by incomplete validation of ioctl arguments without proper verification. The UBSAN warning appears as follows: UBSAN: Undefined behavior in...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: EXT4: Zeroing idisksize when initializing the bootloader inode If the bootloader inode has never been used before, the EXT4IOCSWAPBOOT inode will initialize it, including setting isize to 0. However, if the “never before used”...

CVE-2026-72159

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

CVE-2026-72159 ocfs2: reject non-inline dinodes with i_size and zero i_clusters

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

CVE-2026-74350: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate fast symlink target during inode read ocfs2validateinodeblock already rejects several inconsistent self-contained dinodes before they are exposed to the rest of the filesystem. Fast symlinks need the same treatmen...

CVE-2026-72159: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

Linux Distros Unpatched Vulnerability : CVE-2026-64159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix zeropoint update where isize remoteisize Fix the update of the zero point by netfsreleasefolio when there is uncommitted data in the pagecache beyond...

CVE-2026-64160 netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential for tearing in -remoteisize and -zeropoint Fix potential tearing in using -remoteisize and -zeropoint by copying isizeread and isizewrite and using the same seqcount as for isize. We need to make sure that...

CVE-2026-64159

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where isize remoteisize Fix the update of the zero point by netfsreleasefolio when there is uncommitted data in the pagecache beyond the folio being released but the on-server EOF is in this folio ie...

CVE-2026-64159: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where isize remoteisize Fix the update of the zero point by netfsreleasefolio when there is uncommitted data in the pagecache beyond the folio being released but the on-server EOF is in this folio ie...

PT-2026-61477

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential for tearing exists when using remote i size and zero point. This occurs because these values were not being accessed using the same sequence count as i size. Tearing refers t...

AZL-85838 CVE-2026-43118 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists, as part of logging a new name or logging new dir entries for a directory, we always set the generation of the logged inode item to ...

CVE-2026-43076: Use After Free

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline data isize during inode read When reading an inode from disk, ocfs2validateinodeblock performs various sanity checks but does not validate the size of inline data. If the filesystem is corrupted, an inode's...

CVE-2026-43118: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists, as part of logging a new name or logging new dir entries for a directory, we always set the generation of the logged inode item to ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005473 advisory. In the Linux kernel, the following vulnerability has been resolved: erofs: fix order = MAXORDER warning due to crafted negative isize As syzbot reported 1, the root...