CVE-2026-72477

A flaw was found in the Linux kernel's NTFS3 file system driver. This vulnerability occurs when a file rename operation fails, potentially leaving the file system in an inconsistent state. This inconsistency could lead to system instability or data integrity issues. The resolution ensures that...

CVE-2026-72372

A flaw was found in the AFS Andrew File System component of the Linux kernel. This vulnerability arises from insufficient locking mechanisms when modifying internal data structures related to dynamic inode management. An attacker could potentially exploit this weakness, leading to system...

Linux Distros Unpatched Vulnerability : CVE-2026-72189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: fail attrlist updates when the superblock is inactive genericshutdownsuper clears...

PT-2026-78483

Name of the Vulnerable Software and Affected Versions Grav versions prior to 2.0.1 Description The ZipArchiver::extract function in system/src/Grav/Common/Filesystem/ZipArchiver.php fails to enforce limits on uncompressed size, file count, or nesting depth when passing archives to...

CVE-2026-61690: Improper Handling of Highly Compressed Data (Data Amplification)

Grav is a file-based Web platform. Prior to 2.0.1, Grav ZipArchiver::extract in system/src/Grav/Common/Filesystem/ZipArchiver.php passes archives to ZipArchive::extractTo without enforcing the system.gpm.archive uncompressed-size, file-count, or nesting-depth limits. Code using...

CVE-2026-72187

A flaw was found in the Linux kernel's NTFS file system driver. An attacker with local access could trigger a self-deadlock condition during inode eviction. This occurs when an attribute-list update during cluster allocation causes a temporary inode to lose its last reference, leading to an...

CVE-2026-72162

A flaw was found in ocfs2, a component of the Linux kernel. On-disk corruption of an inode's embedded extent list can lead to an array-index-out-of-bounds error. This occurs when the lnextfreerec value is zero or exceeds lcount during a write operation to the affected file. A local attacker with...

CVE-2026-72160

A flaw was found in ocfs2 Oracle Cluster File System version 2 in the Linux kernel. This vulnerability arises from insufficient validation of on-disk inode metadata, specifically the imode type bits. A local attacker could exploit this by crafting a malformed disk inode with a non-canonical POSIX...

Linux Distros Unpatched Vulnerability : CVE-2026-72187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while...

Linux Distros Unpatched Vulnerability : CVE-2026-72160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: reject dinodes with non-canonical imode type Patch series ocfs2: harden inode validators against forged metadata, v2. This series adds three structural...

Linux Distros Unpatched Vulnerability : CVE-2026-74363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs commit 4f375ade6aa9 bpf: Avoid RCU context warning when unpinning htab with internal structs moved...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101964)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101964 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either...

Linux Distros Unpatched Vulnerability : CVE-2026-72159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with...

CVE-2026-72189

A flaw was found in the Linux kernel's NTFS file system. During the process of shutting down a file system, a specific internal condition can arise where the system attempts to update an attribute list while an associated inode is being evicted. This can lead to a self-deadlock within the kernel'...

The vulnerability of the fs/minix/inode.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/minix/inode.c component in the Linux operating system is related to insufficient checking of the type of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100512)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100512 advisory. In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroupwritebackumount and inodeswitchwbs When a container exits, the...

SUSE CVE-2026-74487

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write access to it for as long as the entry exists. Removing the entry...

CVE-2026-74487

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write access to it for as long as the entry exists. Removing the entry...

CVE-2026-74487

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write access to it for as long as the entry exists. Removing the entry...

UBUNTU-CVE-2026-74487

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write access to it for as long as the entry exists. Removing the entry...