3797 matches found
EUVD-2026-58948
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix mreclock ABBA deadlock in rename ntfsfilefsync, ntfsdirfsync and ntfswriteinode lock an inode's mreclock before taking the mreclock of its parent directory. ntfsrename takes oldni-mreclock and olddirni-mreclock before...
CVE-2026-72189
CVE-2026-72189 concerns the Linux kernel ntfs attribute-list update path. When the superblock becomes inactive, generic_shutdown_super() clears SB_ACTIVE and eviction of inodes can cause the fake inode for a base inode’s unnamed $ATTRIBUTE_LIST to be referenced in a way that leads to a self-deadl...
CVE-2026-72189 ntfs: fail attrlist updates when the superblock is inactive
In the Linux kernel, the following vulnerability has been resolved: ntfs: fail attrlist updates when the superblock is inactive genericshutdownsuper clears SBACTIVE before evicting cached inodes. If eviction selects the fake inode for a base inode's unnamed $ATTRIBUTELIST attribute,...
CVE-2026-72189 ntfs: fail attrlist updates when the superblock is inactive
In the Linux kernel, the following vulnerability has been resolved: ntfs: fail attrlist updates when the superblock is inactive genericshutdownsuper clears SBACTIVE before evicting cached inodes. If eviction selects the fake inode for a base inode's unnamed $ATTRIBUTELIST attribute,...
EUVD-2026-58945
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while allocating clusters can drop the last reference to the temporary attribute inode. Evicting that inode drops its reference to the base inode...
CVE-2026-72187 ntfs: avoid self-deadlock during inode eviction
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while allocating clusters can drop the last reference to the temporary attribute inode. Evicting that inode drops its reference to the base inode...
CVE-2026-72187
The CVE covers a Linux kernel ntfs-related self-deadlock during inode eviction. A) Root cause: an attribute-list update while allocating clusters can drop the last reference to a temporary attribute inode, causing eviction of that inode to drop its reference to the base inode; if the base inode i...
CVE-2026-72186 ntfs: make system files immutable to prevent corruption
In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via showsysfiles and written from userspace, the volume is corrupted and, because the cluster allocator scans $Bitmap through t...
CVE-2026-72186 ntfs: make system files immutable to prevent corruption
In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via showsysfiles and written from userspace, the volume is corrupted and, because the cluster allocator scans $Bitmap through t...
CVE-2026-72187 ntfs: avoid self-deadlock during inode eviction
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while allocating clusters can drop the last reference to the temporary attribute inode. Evicting that inode drops its reference to the base inode...
CVE-2026-72162
CVE-2026-72162 — In the Linux kernel OCFS2 code, a UBSAN array-index-out-of-bounds flaw occurs in ocfs2_sum_rightmost_rec when l_next_free_rec is 0 or exceeds l_count, indexing l_recs[] out of bounds. The root cause is computing i = le16_to_cpu(el->l_next_free_rec) - 1 without validating i. Th...
CVE-2026-72161 ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2checkpointinode During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2evictinode - ocfs2clearinode -...
CVE-2026-72161
The CVE describes a NULL dereference in OCFS2 during inode eviction after unmount, caused by osb->journal being freed but later dereferenced in ocfs2_checkpoint_inode(). The fix adds a NULL check for osb->journal in ocfs2_checkpoint_inode(), so if the journal is NULL (already flushed/destro...
CVE-2026-72161 ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2checkpointinode During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2evictinode - ocfs2clearinode -...
CVE-2026-72160 ocfs2: reject dinodes with non-canonical i_mode type
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical imode type Patch series "ocfs2: harden inode validators against forged metadata", v2. This series adds three structural checks to OCFS2 dinode validation so malformed on-disk fields are...
CVE-2026-72159
CVE-2026-72159 concerns the Linux kernel OCFS2 filesystem: non-inline dinodes with non-zero i_size and zero i_clusters on volumes without OCFS2_FEATURE_INCOMPAT_SPARSE_ALLOC are rejected due to a malformed extent/size descriptor mismatch. The issue affects regular files and non-inline directories...
CVE-2026-72160 ocfs2: reject dinodes with non-canonical i_mode type
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical imode type Patch series "ocfs2: harden inode validators against forged metadata", v2. This series adds three structural checks to OCFS2 dinode validation so malformed on-disk fields are...
CVE-2026-72159 ocfs2: reject non-inline dinodes with i_size and zero i_clusters
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...
EUVD-2026-58917
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...
CVE-2026-72160
CVE-2026-72160 affects the Linux kernel OCFS2 filesystem: it fixes validation of dinode i_mode to reject non-canonical POSIX file types. The patch series “ocfs2: harden inode validators against forged metadata” adds structural checks in ocfs2_validate_inode_block() and mirrors them in the online ...