CVE-2026-13215 Zephyr ext2 mount: unvalidated superblock block size causes out-of-bounds write from a crafted filesystem image

The Zephyr ext2 filesystem driver fails to validate the slogblocksize field of the on-disk superblock when mounting a filesystem. ext2verifydisksuperblock in subsys/fs/ext2/ext2impl.c checks the magic number, revision, inode size and group counts, but never bounds slogblocksize. On a successful...

CVE-2026-13215 Zephyr ext2 mount: unvalidated superblock block size causes out-of-bounds write from a crafted filesystem image

The Zephyr ext2 filesystem driver fails to validate the slogblocksize field of the on-disk superblock when mounting a filesystem. ext2verifydisksuperblock in subsys/fs/ext2/ext2impl.c checks the magic number, revision, inode size and group counts, but never bounds slogblocksize. On a successful...

CVE-2026-13215 Zephyr ext2 mount: unvalidated superblock block size causes out-of-bounds write from a crafted filesystem image

The Zephyr ext2 filesystem driver fails to validate the slogblocksize field of the on-disk superblock when mounting a filesystem. ext2verifydisksuperblock in subsys/fs/ext2/ext2impl.c checks the magic number, revision, inode size and group counts, but never bounds slogblocksize. On a successful...

PT-2026-81172

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The ext2 filesystem driver fails to validate the s log block size field of the on-disk superblock during the filesystem mounting process. The function ext2 verify disk superblock in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: kernfs: Fixed the race condition involving multiple superblocks. Multiple superblocks with different namespaces can share the same kernfsnode when kernfstestsuper finds a matching root but different namespaces. This means that...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102056)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102056 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from dentry in event btrfssyncfile If overlay is used ...

SUSE CVE-2026-68148

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in findorinsertdirectkey The legacy 'fscryptdirectkeys' table caches master keys that are used by v1 encryption policies that have FSCRYPTPOLICYFLAGDIRECTKEY. It's just a global table for all...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100588)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100588 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099777 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized...

CVE-2026-74484

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: don't let an 'F' entry pin its own instance An entry registered with 'F' opens its interpreter at registration time and holds that file until the entry is freed. Any entry nobody removes by hand only gets closed once...

CVE-2026-74483 binfmt_misc: don't leak the user namespace when the mount fails

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: don't leak the user namespace when the mount fails bmgettree takes a reference to the user namespace and hands it to gettreekeyed as the sget key. sgetfc moves that reference into sb-sfsinfo and clears fc-sfsinfo, so...

CVE-2026-74307

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as the original file. Currently, this validation is performed inside...

AZL-96039 CVE-2026-72315 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix busy dentry warning on unmount after DIO Commit c68337442f03 "cifs: Fix busy dentry used after unmounting" fixed the issue in cifs where deferred close of a file led to a dentry reference count not being released...

CVE-2026-74343

In the Linux kernel, the following vulnerability has been resolved: kernfs: fix xattr race condition with multiple superblocks Multiple superblocks with different namespaces can share the same kernfsnode when kernfstestsuper finds a matching root but different namespace. This means multiple inode...

CVE-2026-74259

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

UBUNTU-CVE-2026-74307

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as the original file. Currently, this validation is performed inside...

CVE-2026-72189

In the Linux kernel, the following vulnerability has been resolved: ntfs: fail attrlist updates when the superblock is inactive genericshutdownsuper clears SBACTIVE before evicting cached inodes. If eviction selects the fake inode for a base inode's unnamed $ATTRIBUTELIST attribute,...

EUVD-2026-59490

In the Linux kernel, the following vulnerability has been resolved: kernfs: fix xattr race condition with multiple superblocks Multiple superblocks with different namespaces can share the same kernfsnode when kernfstestsuper finds a matching root but different namespace. This means multiple inode...

CVE-2026-74343

In the Linux kernel, the following vulnerability has been resolved: kernfs: fix xattr race condition with multiple superblocks Multiple superblocks with different namespaces can share the same kernfsnode when kernfstestsuper finds a matching root but different namespace. This means multiple inode...

CVE-2026-74307 ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as the original file. Currently, this validation is performed inside...