Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fsmapblocks in lfs mode When using the “mode=lfs” mount option, generic/299 will cause a system panic as described below: ------------ cut here ------------ kernel BUG at...

CVE-2026-93479

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the mapDecoder.Decode and mapDecoderUnmarshaler.Decode methods in codecmap.go, which use the attacker-controlled map block element count both to pre-size the destination map and as...

Linux EROFS Heap Buffer Overflow DoS

The vulnerability of the zerofsdomapblocks function in the fs/erofs/zmap.c file of the EROFS Enhanced ReadOnly File System file system in the Linux operating system is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010885 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: add idatasem protection in ext4destroyinlinedatanolock Fix a race between inline data...

CVE-2025-68261

CVE-2025-68261 affects the Linux kernel’s ext4 filesystem. The fix adds i_data_sem protection to ext4_destroy_inline_data_nolock() to close a race between destroying inline data and block mapping. Without protection, ext4_ind_map_blocks() may receive an inode with EXT4_INODE_EXTENTS set, triggeri...

f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode

...

SUSE CVE-2025-38626

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fsmapblocks in lfs mode w/ "mode=lfs" mount option, generic/299 will cause system panic as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2835! Call Trace:...

AZL-66614 CVE-2025-38626 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fsmapblocks in lfs mode w/ "mode=lfs" mount option, generic/299 will cause system panic as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2835! Call Trace:...

UBUNTU-CVE-2025-38626

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fsmapblocks in lfs mode w/ "mode=lfs" mount option, generic/299 will cause system panic as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2835! Call Trace:...

CVE-2025-38626 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fsmapblocks in lfs mode w/ "mode=lfs" mount option, generic/299 will cause system panic as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2835! Call Trace:...

CVE-2025-38626

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fsmapblocks in lfs mode w/ "mode=lfs" mount option, generic/299 will cause system panic as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2835! Call Trace:...

CVE-2025-38626

CVE-2025-38626 affects the Linux kernel with the F2FS file system in foreground log-structured (lfs) mode. The issue arises in f2fs_map_blocks() where allocations can trigger block allocations aggressively under parallel aio/dio/bufio workloads, potentially exhausting space and causing a system p...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from f2fsmapblocks not triggering foreground GC in lfs mode, which could lead to space exhaustion...

PT-2024-28093

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue arises when the multi-devices feature is enabled in the Linux kernel, specifically with the f2fs file system. In this scenario, the f2fs map blocks function may return a zero block...