SUSE CVE-2026-31465

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...

EUVD-2026-24809

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...

CVE-2026-31465

CVE-2026-31465 in the Linux kernel concerns the writeback path for filesystems without data integrity guarantees (e.g., fuse). The fix adds a SB_I_NO_DATA_INTEGRITY superblock flag; when set, sync kicks off writeback of dirty inodes but does not wait for flusher threads to finish. The change move...

CVE-2026-31465 writeback: don't block sync for filesystems with no data integrity guarantees

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...

PT-2026-34370

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB I NO DATA INTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set...

Exploit for Privilege Context Switching Error in Canonical Ubuntu_Linux

OverlayFS-LPE-Exploit Type...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007464 advisory. In the Linux kernel, the following vulnerability has been resolved: ovl: fix leaked dentry Since commit 6815f479ca90 ovl: use only uppermetacopy state in ovllookup,...

ROS-20260414-73-0060

A vulnerability in the ovlpermission function of the fs/overlayfs/inode.c module of the Overlayfs file system of the Linux kernel is related to NULL pointer dereferencing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected...

Exploit for Incorrect Authorization in Canonical Ubuntu_Linux

CVE-2023-2640/3262-PoC Minimal PoCs for Ubuntu OverlayFS loca...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005482 advisory. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernels OverlayFS...

Exploit for Privilege Context Switching Error in Canonical Ubuntu_Linux

CVE-2021-3493 – Ubuntu OverlayFS Local Privilege Escalation...

Exploit for Privilege Context Switching Error in Canonical Ubuntu_Linux

CVE-2021-3493 – Ubuntu OverlayFS Local Privilege Escalation...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitness, aws-load-balancer-controller, k8s-device-plugin, runc, k3s, wuzz...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, etcd-fips, localstack, wuzz, runc, terraform, gendesk, k8s-device-plugin, etcd, cilium-envoy, backup-restore-operator, aws-load-balancer-controller, k3s, gitness, gitlab-rails-ce, rke2-runtime, rke2-runtime-fips,...

CVE-2025-47911 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, etcd-fips, localstack, wuzz, runc, terraform, gendesk, k8s-device-plugin, etcd, cilium-envoy, backup-restore-operator, aws-load-balancer-controller, k3s, gitness, gitlab-rails-ce, rke2-runtime, rke2-runtime-fips,...

CVE-2025-58190 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, etcd-fips, localstack, wuzz, runc, terraform, gendesk, k8s-device-plugin, etcd, cilium-envoy, backup-restore-operator, aws-load-balancer-controller, k3s, gitness, gitlab-rails-ce, rke2-runtime, rke2-runtime-fips,...

CVE-2025-47911 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitness, aws-load-balancer-controller, k8s-device-plugin, runc, k3s, wuzz...

CVE-2025-58190 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitness, aws-load-balancer-controller, k8s-device-plugin, runc, k3s, wuzz...

ROS-20260120-7316

A vulnerability in the ovldentryupdatereval function of the fs/overlayfs/copyup.c module of the Linux kernel file system is related to the use of memory after it has been freed. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

MiracleLinux 8 : kernel-4.18.0-348.7.1.el8_5 (AXSA:2022-2949:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2949:01 advisory. kernel: In Overlayfs missing a check for a negative dentry before calling vfsrename CVE-2021-20321 Tenable has extracted the preceding description block...