CVE_2026_31694

CVE-2026-31694 الماسح السلبي أداة تقييم مضيف لينكس سلبية لـ CVE-2026-31694 ، وهي كتابة خارج الحدود في ذاكرة التخزين المؤقت لـ readdir الخاصة بـ FUSE في نواة لينكس. يقوم الماسح بتقييم النواة قيد التشغيل، والتعرض لـ FUSE، وبيانات الحزم المحلية، وأدلة مصدر النواة، وبيئة التنفيذ، وعائلة نظام التشغيل...

CVE-2026-31694-POC

CVE-2026-31694: FUSE readdir कैश आउट-ऑफ-बाउंड राइट fs/fuse/readdir.c:fuseadddirenttocache में एक गुम बाउंड्स चेक। एक FUSE सर्वर namelen = 4095 के साथ एक dirent लौटाता है, जो 4120-बाइट रिकॉर्ड में सीरियलाइज़ होता है। कर्नेल इसे एक एकल 4096-बाइट पेज-कैश पेज में कॉपी करता है और अगले भौतिक पेज में 24...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: jfs: fixed an array-index-out-of-bounds read in addmissingindices. stbl is an s8 type, but it must contain offsets into slots that can range from 0 to 127. A bound check was added for this error, and the error -EIO is returned if...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplusuni2asc The hfsplusreaddir method is capable to crash by calling hfsplusuni2asc: 667.121659 T9805 ================================================================== 667.122651 T9805...

AZL-101972 CVE-2026-92499 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: validate readdir offset before accessing dirent A corrupted directory can trigger the following KASAN report when ext4readdir resumes from an invalid position: BUG: KASAN: use-after-free in ext4checkdirentry+0x5ef/0x820 Rea...

PT-2026-94807

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext4 file system where a corrupted directory can cause a use-after-free error. This occurs when the ext4 readdir function resumes from an invalid position...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: jfs: fixed an array-index-out-of-bounds issue in jfsreaddir. The stbl might contain some invalid values. A check was added to return an error code in such cases...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ceph: A memory leak was fixed in cephreaddir when notelastdentry returns an error. lastreaddir was reset at the same time, and a comment was added explaining why lastreaddir is not freed when diremit returns false...

SUSE CVE-2026-89490

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksize - 1 | offset; ctx-pos is lofft signed 64-bit, while sb-sblocksize i...

SUSE CVE-2026-89498

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailerbuf on readdir copy failure On a readdir downcall, orangefsdevreqwriteiter frees op-downcall.trailerbuf with vfree when copyfromiterfull fails, but does not clear the pointer before goto Efault...

Linux Distros Unpatched Vulnerability : CVE-2026-89490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksiz...

Linux Distros Unpatched Vulnerability : CVE-2026-89498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - orangefs: fix double-free of trailerbuf on readdir copy failure On a readdir downcall, orangefsdevreqwriteiter frees op-downcall.trailerbuf with vfree when...

CVE-2026-89707

A flaw was found in the Linux kernel's nfsd component. An authenticated Network File System NFS client can exploit this vulnerability by triggering a failed cross-mount operation through nfsdlookupdentry or the NFSv4 READDIR encode path. This leads to a reference count leak, which inflates mntcou...

CVE-2026-89498

A flaw was found in OrangeFS within the Linux kernel. A local client, by sending a specially crafted readdir downcall with a declared trailersize exceeding the actual supplied bytes, can trigger a double-free vulnerability. This memory corruption issue can lead to a system crash, resulting in a...

AZL-100470 CVE-2026-89498 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailerbuf on readdir copy failure On a readdir downcall, orangefsdevreqwriteiter frees op-downcall.trailerbuf with vfree when copyfromiterfull fails, but does not clear the pointer before goto Efault...

DEBIAN-CVE-2026-89498

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailerbuf on readdir copy failure On a readdir downcall, orangefsdevreqwriteiter frees op-downcall.trailerbuf with vfree when copyfromiterfull fails, but does not clear the pointer before goto Efault...

CVE-2026-89498

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailerbuf on readdir copy failure On a readdir downcall, orangefsdevreqwriteiter frees op-downcall.trailerbuf with vfree when copyfromiterfull fails, but does not clear the pointer before goto Efault...

DEBIAN-CVE-2026-89490

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksize - 1 | offset; ctx-pos is lofft signed 64-bit, while sb-sblocksize i...

AZL-100220 CVE-2026-89490 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksize - 1 | offset; ctx-pos is lofft signed 64-bit, while sb-sblocksize i...

CVE-2026-89490

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksize - 1 | offset; ctx-pos is lofft signed 64-bit, while sb-sblocksize i...