CentOS Linux 7 [TuxCare] Security Update: grub2 / grub2-common / grub2-efi-ia32 / grub2-efi-ia32-cdboot / etc (CENTOS7:CLSA-2025:1758891628)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1758891628 advisory. - Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: lzo – Fix for compression buffer overflows Unlike the decompression code, the compression code in LZO never checked for output overflows. Instead, it assumes that the caller always provides sufficient buffer space, withou...

Astra Linux – Vulnerability in gst-plugins-good1.0

DOS: Potential heap overwrite during MKV demuxing using LZO decompression. Integer overflow in the Matroskademux element within the LZO decompression function can cause a segfault, or potentially a heap overwrite, depending on the libc and operating system. Depending on the libc used and the...

[SECURITY] Fedora 45 Update: openvpn-2.7.7-1.fc45

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

[SECURITY] Fedora 44 Update: openvpn-2.7.7-1.fc44

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

CVE-2026-80631

A flaw was found in the Linux kernel's Btrfs filesystem, specifically within its LZO decompression functionality. A local attacker could provide a specially crafted Btrfs image containing a compressed segment that, due to improper validation of its length, overflows the compressed input buffer...

SUSE CVE-2026-80631

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

CVE-2026-80631

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

AZL-98102 CVE-2026-80631 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

CVE-2026-80631

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

UBUNTU-CVE-2026-80631

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

CVE-2026-80631 btrfs: lzo: reject compressed segment that overflows the compressed input

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

EUVD-2026-67507

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

CVE-2026-80631

CVE-2026-80631 affects the Linux kernel's btrfs LZO decompression path (lzo_decompress_bio() in fs/btrfs/lzo.c). The root cause is an insufficient validation check: each on-disk segment length (seg_len) is validated only against the workspace buffer size, not against the actual compressed input s...

CVE-2026-80631

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

CVE-2026-80631 btrfs: lzo: reject compressed segment that overflows the compressed input

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

PT-2026-86706

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzo decompress bio validates each on-disk segment length seg len only against the workspace cbuf size, not against the compressed input size compressed len...

PT-2026-82931

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Btrfs LZO decompression process where the lzo decompress bio function fails to validate the on-disk segment length seg len against the total compressed input size...

Linux Distros Unpatched Vulnerability : CVE-2026-80631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspa...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098784)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098784 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: lzo - Fix compression buffer overrun Unlike the decompression code, the compression code ...