873 matches found
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: smb: Client: Fixed the issue where a busy dentry warning would occur after unmount after DIO. The commit c68337442f03 “cifs: Fixed the issue where deferred dentry references were not released after unmount” addressed the issue...
Astra Linux – vulnerability in linux-6.18
In the Linux kernel, the following vulnerability has been resolved: fs: avoid repeated scans in evictinodes We observed hung tasks when users attempted to unmount a filesystem after its disk had been removed while still in use. During device removal, fsbdevmarkdead calls evictinodes while holding...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount when cifssbtlink fails cifsoplockbreak takes over the reference that cifsqueueoplockbreak acquired when it queued the work, and drops it with cifsFileInfoput once the break has been processed...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount in cifsqueueoplockbreak cifsqueueoplockbreak unconditionally takes a reference on the target file before queueing cifsoplockbreak. Only that work item decreases the reference counter again. If...
kernel: fs/resctrl: Fix use-after-free during unmount
A flaw was found in the Linux kernel's resctrl filesystem. During the unmount process, a timing issue can occur where a concurrent reader of an event file attempts to access memory that has already been released. This 'use-after-free' vulnerability allows a local attacker to dereference invalid...
kernel: fs/resctrl: Fix use-after-free during unmount
A flaw was found in the Linux kernel's resctrl filesystem. During the unmount process, a timing issue can occur where a concurrent reader of an event file attempts to access memory that has already been released. This 'use-after-free' vulnerability allows a local attacker to dereference invalid...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ocfs2: Added a NULL check for osb-journal in ocfs2checkpointinode During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts any remaining cached inodes, ocfs2evictinode -...
CVE-2026-98924
A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS when attempting to unmount a filesystem after its underlying storage device has been disconnected while in use. During cleanup, the kernel repeatedly rescans cached file metadata structures without making...
CVE-2026-99174
A flaw was found in the Linux kernel's ext4 file system. A local user could exploit a race condition during concurrent file path lookup and filesystem unmount operations. When resolving a symbolic link as the filesystem's last mount reference is released, the kernel may dereference a null pointer...
CVE-2026-98991
A flaw was found in the Linux kernel. A local attacker can cause a Denial of Service DoS by triggering a use-after-free flaw, which occurs when the system accesses memory after it has been released. During certain unmount operations, the kernel fails to verify whether a filesystem mount is alread...
CVE-2026-103400
An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...
CVE-2026-103400 Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup
An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...
EUVD-2026-112221
An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...
PT-2026-128165
Content removed...
PT-2026-128276
An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...
CVE-2026-103400: Juniper Networks: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in…
An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...
SUSE CVE-2026-98924
In the Linux kernel, the following vulnerability has been resolved: fs: avoid repeated scans in evictinodes We observed hung tasks when users attempted to unmount a filesystem after its disk had been removed while still in use. During device removal, fsbdevmarkdead calls evictinodes while holding...
SUSE CVE-2026-98996
In the Linux kernel, the following vulnerability has been resolved: fs: don't silently unmount busy mounts The propagatemountbusy helper exists to decide whether a synchronous can suceed. It does that by looking at the copies of the victims in the mounts its parent propagates to. One of those...
AZL-110837 CVE-2026-98996 affecting package kernel 6.6.161.1-1
In the Linux kernel, the following vulnerability has been resolved: fs: don't silently unmount busy mounts The propagatemountbusy helper exists to decide whether a synchronous can suceed. It does that by looking at the copies of the victims in the mounts its parent propagates to. One of those...
DEBIAN-CVE-2026-98996
In the Linux kernel, the following vulnerability has been resolved: fs: don't silently unmount busy mounts The propagatemountbusy helper exists to decide whether a synchronous can suceed. It does that by looking at the copies of the victims in the mounts its parent propagates to. One of those...