SUSE CVE-2026-72470

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log-onepagebuf when adopting on-disk page size logreplay allocates log-onepagebuf using the page size that was chosen from the host PAGESIZE: log-onepagebuf = kmalloclog-pagesize, GFPNOFS; Later, when a restart...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098799)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098799 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix missing lastunlinktrans update when removing a directory When removing a directory we...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098815 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098977)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098977 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: When adopting the on-disk page size, resizelog-onepagebuf is called. logreplay allocates log-onepagebuf using the page size chosen from the host’s PAGESIZE: log-onepagebuf = kmalloclog-pagesize, GFPNOFS; Later, when a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102103)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102103 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists,...

CVE-2026-72196

A flaw was found in the Linux kernel's NTFS3 file system driver. A local attacker could craft a malicious NTFS file system image that, when mounted, would cause a malformed log record header LRH to trigger an out-of-bounds write during log replay. This memory corruption could lead to a system...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101964)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101964 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102110 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix missing lastunlinktrans update when removing a directory When removing a directory we...

UBUNTU-CVE-2026-72470

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log-onepagebuf when adopting on-disk page size logreplay allocates log-onepagebuf using the page size that was chosen from the host PAGESIZE: log-onepagebuf = kmalloclog-pagesize, GFPNOFS; Later, when a restart...

CVE-2026-72470

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log-onepagebuf when adopting on-disk page size logreplay allocates log-onepagebuf using the page size that was chosen from the host PAGESIZE: log-onepagebuf = kmalloclog-pagesize, GFPNOFS; Later, when a restart...

CVE-2026-72470 fs/ntfs3: resize log->one_page_buf when adopting on-disk page size

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log-onepagebuf when adopting on-disk page size logreplay allocates log-onepagebuf using the page size that was chosen from the host PAGESIZE: log-onepagebuf = kmalloclog-pagesize, GFPNOFS; Later, when a restart...

EUVD-2026-59369

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log-onepagebuf when adopting on-disk page size logreplay allocates log-onepagebuf using the page size that was chosen from the host PAGESIZE: log-onepagebuf = kmalloclog-pagesize, GFPNOFS; Later, when a restart...

CVE-2026-72196 fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copylcns dp-pagelcns index in analysis pass In logreplay's analysis pass, after finddp returns a valid DIRPAGEENTRY for the targetattr, targetvcn tuple, the copylcns block walks lrh-lcnsfollow further entries: t16...

PT-2026-72658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS3 file system where a buffer overflow can occur when mounting a dirty NTFS volume. The log replay function initially allocates the log-one page buf buffer base...

PT-2026-72384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ntfs3 file system during the analysis pass of the log replay function. When processing a DIR PAGE ENTRY for a specific tuple, the system iterates through further...

fs/ntfs3: validate lcns_follow in log_replay conversion

...

SUSE CVE-2026-64533

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcnsfollow in logreplay conversion logreplay converts DIRPAGEENTRY32 records into DIRPAGEENTRY records when replaying version 0 restart tables. During this conversion, the memmove length is derived directly fro...

CVE-2026-64533

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcnsfollow in logreplay conversion logreplay converts DIRPAGEENTRY32 records into DIRPAGEENTRY records when replaying version 0 restart tables. During this conversion, the memmove length is derived directly fro...

UBUNTU-CVE-2026-64533

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcnsfollow in logreplay conversion logreplay converts DIRPAGEENTRY32 records into DIRPAGEENTRY records when replaying version 0 restart tables. During this conversion, the memmove length is derived directly fro...