Linux Distros Unpatched Vulnerability : CVE-2026-90200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: fix integer overflow in MFT cluster validation In ntfsinitfromboot, the boot sector's MFT cluster numbers are validated against the volume size with: ...

IBM MQ 9.1 < 9.1.0.38 LTS / 9.2 < 9.2.0.44 LTS / 9.3 < 9.3.0.42 LTS / 9.4 < 9.4.0.26 LTS / 9.3 - 10.0.0.0 CD < 10.0.0.5 (7284895)

The version of IBM MQ Server running on the remote host is 9.1.0.0 prior to 9.1.0.38 LTS, or 9.2.0.0 prior to 9.2.0.44 LTS, or 9.3.0.0 prior to 9.3.0.42 LTS, or 9.4.0.0 prior to 9.4.0.26 LTS, or a 9.3.x / 9.4.x CD release, or 10.0.0.0. It is, therefore, affected by a vulnerability as referenced i...

DEBIAN-CVE-2026-90200

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfsinitfromboot, the boot sector's MFT cluster numbers are validated against the volume size with: if mlcn sctperclst = sectors || mlcn2 sctperclst = sectors goto out;...

CVE-2026-90200

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfsinitfromboot, the boot sector's MFT cluster numbers are validated against the volume size with: if mlcn sctperclst = sectors || mlcn2 sctperclst = sectors goto out;...

CVE-2026-90131

In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize resident iomap reads with mreclock ntfsreadiomapbeginresident walks the MFT record through ntfsattrlookup - ntfsattrfind without taking ni-mreclock, while ntfsattrrecordresize, ntfsmakeroomforattr and...

DEBIAN-CVE-2026-90131

In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize resident iomap reads with mreclock ntfsreadiomapbeginresident walks the MFT record through ntfsattrlookup - ntfsattrfind without taking ni-mreclock, while ntfsattrrecordresize, ntfsmakeroomforattr and...

CVE-2026-90200

CVE-2026-90200 affects the Linux kernel NTFS3 filesystem driver (fs/ntfs3). In ntfs_init_from_boot(), the MFT cluster numbers (mlcn, mlcn2) read from the boot sector are validated via a u64 multiplication against the volume size. A sufficiently large value (e.g., near 2^62) causes the multiplicat...

CVE-2026-90200 fs/ntfs3: fix integer overflow in MFT cluster validation

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfsinitfromboot, the boot sector's MFT cluster numbers are validated against the volume size with: if mlcn sctperclst = sectors || mlcn2 sctperclst = sectors goto out;...

CVE-2026-90200 fs/ntfs3: fix integer overflow in MFT cluster validation

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfsinitfromboot, the boot sector's MFT cluster numbers are validated against the volume size with: if mlcn sctperclst = sectors || mlcn2 sctperclst = sectors goto out;...

EUVD-2026-81793

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfsinitfromboot, the boot sector's MFT cluster numbers are validated against the volume size with: if mlcn sctperclst = sectors || mlcn2 sctperclst = sectors goto out;...

CVE-2026-90117 ntfs: validate usa_ofs before preserving the update sequence number

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate usaofs before preserving the update sequence number When ntfsmftrecordalloc reuses a free mft record it reads the old update sequence number straight from the on-disk record: usn = le16 u8 m + le16tocpum-usaofs; He...

CVE-2026-90117

CVE-2026-90117 affects the Linux kernel's NTFS filesystem driver . In ntfs_mft_record_alloc(), when reusing a free MFT record, the usa_ofs field is read directly from a raw $MFT page-cache folio without validation. Because MST fixup and record checking operate on private copies, usa_ofs remains a...

CVE-2026-90200: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfsinitfromboot, the boot sector's MFT cluster numbers are validated against the volume size with: if mlcn sctperclst = sectors || mlcn2 sctperclst = sectors goto out;...

Fortra GoAnywhere Managed File Transfer (MFT) < 7.10.2 Path Traversal (CVE-2026-15913)

According to its self-reported version, the instance of Fortra GoAnywhere Managed File Transfer MFT running on the remote host is prior to 7.10.2. It is, therefore, affected by a path traversal vulnerability in the /attachRemoteFiles endpoint which allows Web Users with both Secure Folders and...

CVE-2026-83030

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...

CVE-2026-83029

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

EUVD-2026-79358

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...

EUVD-2026-79357

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-83029

Oracle Managed File Transfer (MFT Runtime Server) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The CVSS 3.1 score is 9.6 (CRITICAL) with ...

CVE-2026-83030

Oracle Managed File Transfer (component: MFT Runtime Server ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via T3 or IIOP to compromise the system. Successful exploitation c...