The vulnerability of the `btrfs_iget()` function in the `fs/btrfs/inode.c` module of the Btrfs file system in Linux kernels allows a attacker to cause a service failure.

The vulnerability of the btrfsiget function in the fs/btrfs/inode.c file of the Btrfs file system in Linux kernels involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a attacker to cause service failures...

CLSA-2026-1773046198 kernel: Fix of 31 CVEs

smb3: fix for slab out of bounds on mount to ksmbd CVE-2025-38728 - netfilter: nftsetpipapo: clamp maximum map bucket size to INTMAX CVE-2025-38201 - ALSA: usb-audio: Validate UAC3 power domain descriptors, too CVE-2025-38729 - net: atm: fix /proc/net/atm/lec handling CVE-2025-38180 - tcpbpf:...

Unbreakable Enterprise kernel security update

5.4.17-2136.353.3 - xfrm: flush all states in xfrmstatefini Sabrina Dubroca Orabug: 38934000 - xfrm: also call xfrmstatedeletetunnel at destroy time for states that were never added Sabrina Dubroca Orabug: 38934000 - Revert 'xfrm: destroy xfrmstate synchronously on net exit path' Sabrina Dubroca...

The vulnerability of the `hugetlbfs_error_remove_page()` function in the `fs/hugetlbfs/inode.c` module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the hugetlbfserrorremovepage function in the fs/hugetlbfs/inode.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_setattr() function in the fs/ext4/inode.c module of the Linux file system support module allows a attacker to cause a service failure.

The vulnerability of the ext4setattr function in the fs/ext4/inode.c module of the Linux file system support module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability in the sanity_check inode() function of the fs/f2fs/inode.c module of the F2FS file system support in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sanitycheck inode function in the fs/f2fs/inode.c module of the F2FS file system support in the Linux operating system is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the f2fs_evict inode() function in the fs/f2fs/inode.c module of the F2FS file system support in Linux’s kernel allows a attacker to cause a service failure.

The vulnerability of the f2fsevict inode function in the fs/f2fs/inode.c module of the F2FS file system support in Linux operating systems is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005650)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005650 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005780 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of nilfsroot in dirtying inodes via iput During unmount process of...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005534 advisory. In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between eviceinodes and findinode&iput Hi, all Recently I noticed a bug1 in btrfs,...

RHEL 8 : kernel (RHSA-2026:3360)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3360 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/core: Fix KASAN:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005431 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of nilfsroot in dirtying inodes via iput During unmount process of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005411)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005411 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the...

PT-2026-29494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel's AppArmor component contained a race condition between freeing data and filesystem access to it. AppArmor was releasing the reference to i private data after removing t...

The vulnerability of the jfs_truncate_nolock() function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the jfstruncatenolock function in the fs/jfs/inode.c file of the JFS file system in Linux kernel is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext2_setsize() function in the fs/ext2/inode.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext2setsize function in the fs/ext2/inode.c module of the Linux kernel file system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid

A flaw null pointer dereference in the Linux kernel NFS functionality was found in the way client does some specific action for existing NFS connection. A client user could use this flaw to crash the server system...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...