CVE-2026-23214

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject new transactions if the fs is fully read-only BUG There is a bug report where a heavily fuzzed fs is mounted with all rescue mount options, which leads to the following warnings during unmount: BTRFS: Transaction...

CVE-2026-23214 btrfs: reject new transactions if the fs is fully read-only

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject new transactions if the fs is fully read-only BUG There is a bug report where a heavily fuzzed fs is mounted with all rescue mount options, which leads to the following warnings during unmount: BTRFS: Transaction...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005154)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005154 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at...

Azure Linux 3.0 Security Update: kernel (CVE-2024-38570)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38570 advisory. - In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after- fre...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38058)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38058 advisory. - In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49870)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49870 advisory. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004311)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004311 advisory. A flaw was found in the Linux kernels futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001293 advisory. The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000947 advisory. The mountpointlast function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000775 advisory. The doumount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAPSYSADMIN capability for doremountsb calls that change the root...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003321 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncateinlineinode in fs/f2fs/inline.c when umounting an f2fs image,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002587)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002587 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncateinlineinode in fs/f2fs/inline.c when umounting an f2fs image,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002453 advisory. fs/namespace.c in the Linux kernel before 4.0.2 processes MNTDETACH umount2 system calls without verifying that the MNTLOCKED flag is unset, which allows local users...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003466)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003466 advisory. The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel...

CVE-2025-71105

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inlinexattrslab instead of per-sb slab cache As Hong Yun reported in mailing list: loop7: detected capacity change from 0 to 131072 ------------ cut here ------------ kmemcache of name 'f2fsxattrentry-7:7' alread...

CVE-2025-71107

In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fsputsuper finishes Xfstests generic/335, generic/336 sometimes crash with the following message: F2FS-fs dm-0: detect filesystem reference count leak during umount, type: 9, count: ...

CVE-2025-71107

In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fsputsuper finishes Xfstests generic/335, generic/336 sometimes crash with the following message: F2FS-fs dm-0: detect filesystem reference count leak during umount, type: 9, count: ...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: fs/notify: Calling intotifyshowfdinfo on a file descriptor that watches an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing a NULL pointer. This issue was discovered by syzkaller. Race Condition...

podman security update

5.6.0-11.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.6.0-11 - update to the latest content of...

PT-2026-20426

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc5-00002-gb71e635feefc Description The Btrfs file system in the Linux kernel allows new transactions even when the file system is read-only. This behavior can lead to warnings and potential issues during...