PT-2026-121877

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb write pointer with invalidate lock sb write pointer reads the super block from the block device page cache using read cache page gfp. This has the same race with BLKBSZSET as the one fixed by commit 3f29d661e568...

PT-2026-116772

In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofs kill sb When autofs fill super fails before clearing AUTOFS SBI CATATONIC for example, when find get pid fails on an invalid pgrp mount option, or when an fs context is closed...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent the null-ptr-deref bug...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the return result of sbminblocksize Syzkaller reports a bug named “UBSAN: shift-out-of-bounds in squashfsbioread”. Syzkaller forks multiple processes. After mounting the Squashfs filesystem, it issues an...

KLA91326 Multiple vulnerability in Microsoft Dynamics

Multiple vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to bypass security restrictions, execute arbitrary code. Original advisories CVE-2026-88131 Exploitation Related products Microsoft-Dataverse CVE list CVE-2026-88131 critical KB list Solution...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qedi: Fixed a possible memory leak in qediallocandinitsb. The hook “qediops-common-sbinit = qedsbinit” does not release the DMA-mapped memory when it fails. Add dmafreecoherent to release this memory. This is the same...

PT-2026-98502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SMB client where tcon super cb stores a raw superblock pointer. Because cifs get super only takes an active reference after iterate supers type has dropped...

CVE-2026-97927

In the Linux kernel, the following vulnerability has been resolved: ufs: create the root dentry after loading cylinder metadata ufsfillsuper installed sb-sroot before it loaded the cylinder group structures for a writable mount: sb-sroot = dmakerootinode; ... if !sbrdonlysb if...

PT-2026-98496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the SMB client when the cifs sb tlink function fails. This issue specifically affects configurations using the -o multiuser option. In these scenarios, t...

PT-2026-98559

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the io uring/rw component where write accounting was incorrectly moved from the kiocb completion handler to the io req rw complete task work. This deferral creates a...

PT-2026-97956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular lock dependency exists in the ext4 ext migrate function. This occurs between s writepages rwsem and sb internal used for freeze protection, which can lead to a deadlock. The...

PT-2026-94625

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the md/md-llbitmap component. The llbitmap create function publishes mddev-bitmap before reading the bitmap superblock. If the llbitmap read sb...

KLA91299 SB vulnerabilities in Apache Tomcat

Security bypass vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities: 1. Security vulnerability can be exploited to bypass security restrictions. 2. Security vulnerability in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qedf: Fixed a possible memory leak in qedfallocandinitsb. The hook “qedops-common-sbinit = qedsbinit” does not release the DMA-mapped memory sbvirt when it fails. Added dmafreecoherent to release this memory. This is the...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: gfs2: Check sbbsizeshift after reading the superblock. Fuzzers often modify sbbsizeshift, but in reality it’s very unlikely that this field would be corrupted on its own. Nevertheless, it should still be checked to avoid potentia...

CVE-2026-89557 md: do overflow check for sb->bblog_shift in super_1_load()

In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-bblogshift in super1load In super1load, sb-bblogshift is an u8 type value loaded from on- disk superblock. It is used for badblocks API badblocksset by the following sequence, 1930 rdev-badblocks.shif...

wagtail-sb-socialnetworks (0.1.0) potentially affected by CVE-2026-55468 via wagtail (3.0.0rc3)

wagtail PYPI version 3.0.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-socialnetworks 0.1.0 Source cves: CVE-2026-55468 Source advisory: OSV:PYSEC-2026-3939...

wagtail-sb-socialnetworks (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-55468 via wagtail (4.0.0rc2)

wagtail PYPI version 4.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-socialnetworks =0.2.0, =0.3.0 Source cves: CVE-2026-55468 Source advisory: OSV:PYSEC-2026-3939...

wagtail-sb-socialnetworks (>=0.2.0, <=0.3.0) potentially affected by unknown CVE via wagtail (4.0.0rc2)

wagtail PYPI version 4.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-socialnetworks =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-JM5P-837G-RV8G...

wagtail-sb-admin-interface (0.7.0), wagtail-sb-codefield (0.4.0) +4 more potentially affected by unknown CVE via wagtail (6.0.0rc1)

wagtail PYPI version 6.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface 0.7.0 - wagtail-sb-codefield 0.4.0 - wagtail-sb-fontawesome 0.3.0 - wagtail-sb-imageserializer =0.1.0, =0.1.0, =0.2....