360 matches found
SUSE CVE-2026-72097
In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereference Fix a possible NULL pointer dereference dmverityloadpinisbdevtrusted if the device has no table...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098728)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098728 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: dm-verity: fixed a possible NULL pointer dereferencing issue. Fixed a possible NULL pointer dereferencing in dmverityloadpinisbdevtrusted if the device does not have a table...
SUSE CVE-2026-74596
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...
CVE-2026-74596
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...
CVE-2026-74596
This vulnerability affects the Linux kernel in the fsverity (filesystem verity) subsystem. The issue is in setattr_prepare(), where an unnecessary check for whether fs-verity is enabled in the kernel was present. Filesystems can contain fsverity files even when fs-verity is not enabled, and in th...
CVE-2026-74596 fs,fsverity: remove check for fsverity being enabled in setattr_prepare()
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...
SUSE CVE-2026-72098
In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if neras && neras fec-roots fio-erasuresneras++ = i; This allows neras to reach roots + 1 the post-increment pushes it past roots. This...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102125)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102125 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive...
Linux Distros Unpatched Vulnerability : CVE-2026-72097
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: fix a possible NULL pointer dereference Fix a possible NULL pointer dereference dmverityloadpinisbdevtrusted if the device has no table. CVE-2026-720...
CVE-2026-72098
A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...
CVE-2026-72097
A flaw was found in the Linux kernel's dm-verity component. A possible NULL pointer dereference can occur in the dmverityloadpinisbdevtrusted function if a device lacks a table. This vulnerability could allow a local attacker to cause a system crash, leading to a Denial of Service DoS...
CVE-2026-72096
A flaw was found in the Linux kernel's dm-verity component. The 'corruptederrs' counter, which tracks errors in corrupted blocks, was not atomic. This vulnerability could allow a race condition to occur, potentially causing the system to skip auditing when the maximum number of corrupted errors i...
The vulnerability of the drivers/md/dm-verity-fec.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drivers/md/dm-verity-fec.c component in the Linux operating system is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100323)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100323 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to...
AZL-96362 CVE-2026-72098 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if neras && neras fec-roots fio-erasuresneras++ = i; This allows neras to reach roots + 1 the post-increment pushes it past roots. This...
CVE-2026-72097
In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereference Fix a possible NULL pointer dereference dmverityloadpinisbdevtrusted if the device has no table...
CVE-2026-72096
In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...
CVE-2026-72098
In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if neras && neras fec-roots fio-erasuresneras++ = i; This allows neras to reach roots + 1 the post-increment pushes it past roots. This...
CVE-2026-72096
In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...