CVE-2026-63804

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2qddealloc gfs2qddealloc, called as an RCU callback from gfs2qddispose, accesses the superblock object sdp through qd-qdsbd after freeing qd. It does so to decrement sdquotacount and wake up...

CVE-2026-63804 gfs2: fix use-after-free in gfs2_qd_dealloc

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2qddealloc gfs2qddealloc, called as an RCU callback from gfs2qddispose, accesses the superblock object sdp through qd-qdsbd after freeing qd. It does so to decrement sdquotacount and wake up...

EUVD-2026-45470

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2qddealloc gfs2qddealloc, called as an RCU callback from gfs2qddispose, accesses the superblock object sdp through qd-qdsbd after freeing qd. It does so to decrement sdquotacount and wake up...

EUVD-2026-45503

In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput called from fusereleaseend can Oops if the super block has already been destroyed. Normally this is prevented by waiting for numwaiting to go down to zero before commencing with super blo...

CVE-2026-53381

In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput called from fusereleaseend can Oops if the super block has already been destroyed. Normally this is prevented by waiting for numwaiting to go down to zero before commencing with super blo...

CVE-2026-53381

The CVE-2026-53381 issue affects the Linux kernel’s virtiofs path for submount umount. The root cause is a use-after-free (UAF) in iput() invoked from fuse_release_end() when the superblock has already been destroyed; the existing safeguard (wait for num_waiting to drop to zero) only covered the ...

CVE-2026-53381

In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput called from fusereleaseend can Oops if the super block has already been destroyed. Normally this is prevented by waiting for numwaiting to go down to zero before commencing with super blo...

CVE-2026-53381 virtiofs: fix UAF on submount umount

In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput called from fusereleaseend can Oops if the super block has already been destroyed. Normally this is prevented by waiting for numwaiting to go down to zero before commencing with super blo...

PT-2026-61120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the GFS2 file system within the gfs2 qd dealloc function. This function is executed as an RCU Read-Copy-Update callback—a mechanism used to synchronize...

Linux Distros Unpatched Vulnerability : CVE-2026-53381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtiofs: fix UAF on submount umount iput called from fusereleaseend can Oops if the super block has already been destroyed. Normally this is prevented by waiti...

PT-2026-61425

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cifs module where a dentry remains busy after unmounting. This occurs because the cifs file close work, handled by cfile-deferred, can be executed after the...

PT-2026-61086

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the virtiofs component during submount umount operations. The problem occurs when iput is called from fuse release end, which can lead to a system...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fixed NULL pointer dereferencing in gfs2logFlush. In gfs2jindexfree, set sdp-sdjdesc to NULL under the log flush lock to prevent dereferencing of sdp-sdjdesc while gfs2logFlush is ongoing. In gfs2logFlush, checked whether...

OESA-2026-2871 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: use expect-helper Use expect-helper in ctnetlink and /proc to dump the helper name. Using nfcthelp without holding a reference to t...

SUSE CVE-2026-53284

In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes WARNING With extra warning on dirty extent buffers at umount aka, the next patch in the series, test case generic/388 can trigger the following warning about dir...

Linux Distros Unpatched Vulnerability : CVE-2026-53272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: fix use-after-free on sbi-syncdecompress zerofsdecompresskickoff can race with filesystem unmount, causing a use-after-free on sbi-syncdecompress. When I...

Linux Distros Unpatched Vulnerability : CVE-2026-53284

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: only release the dirty pages io tree after successful writes WARNING With extra warning on dirty extent buffers at umount aka, the next patch in the...

CVE-2026-53284

In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes WARNING With extra warning on dirty extent buffers at umount aka, the next patch in the series, test case generic/388 can trigger the following warning about dir...

DEBIAN-CVE-2026-53284

In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes WARNING With extra warning on dirty extent buffers at umount aka, the next patch in the series, test case generic/388 can trigger the following warning about dir...

UBUNTU-CVE-2026-53284

In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes WARNING With extra warning on dirty extent buffers at umount aka, the next patch in the series, test case generic/388 can trigger the following warning about dir...