CVE-2026-72205 ntfs: free volume-wide resources on fill_super failure

In the Linux kernel, the following vulnerability has been resolved: ntfs: free volume-wide resources on fillsuper failure ntfsfillsuper's erroutnow path frees only the volume struct via kfreevol, leaving several vol-owned allocations behind on every mount failure: - vol-nlsmap, loaded by...

EUVD-2026-58944

In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via showsysfiles and written from userspace, the volume is corrupted and, because the cluster allocator scans $Bitmap through t...

EUVD-2026-59061

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

PT-2026-72374

In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via show sys files and written from userspace, the volume is corrupted and, because the cluster allocator scans $Bitmap through...

PT-2026-72561

In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs break some callbacks Fix afs break some callbacks to check to see if afs lookup volume rcu returned NULL e.g. the specified volume is unknown...

PT-2026-72292

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

PT-2026-72559

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS VOLUME RM TREE is set on Fix afs insert volume into cell to set AFS VOLUME RM TREE on the volume replaced, not the new volume, as it's now removed from the cell's volume tree. This will cause the old volum...

CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, cloud-provider-azure, gitlab-operator-fips, gostatsd, slsa-verifier, gitness, k8ssandra-operator, knative-eventing-fips, crossplane-provider-keycloak, q, crossplane-provider-aws-codeartifact-fips, ctop,...

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-secretsmanager, yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, hydra-fips, spicedb-operator, zitadel, longhorn-cli, flux-kustomize-controller, cloud-provider-azure-fips, cloud-provider-azure, crossplane-provider-aws-account-fips,...

CVE-2026-56859 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-secretsmanager, yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, hydra-fips, spicedb-operator, zitadel, longhorn-cli, flux-kustomize-controller, cloud-provider-azure-fips, cloud-provider-azure, crossplane-provider-aws-account-fips,...

CVE-2026-33818 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, cloud-provider-azure, gitlab-operator-fips, gostatsd, slsa-verifier, gitness, k8ssandra-operator, knative-eventing-fips, crossplane-provider-keycloak, q, crossplane-provider-aws-codeartifact-fips, ctop,...

EUVD-2026-58187

The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt fails common on non-reflink-capable filesystems including many RHEL default XFS configurations, the fallback in ReflinkOrCopy uses io.Cop...

CLEANSTART-2026-EE75554 Security fixes in volume-modifier-for-k8s-fips 0.9.5-r2

Package volume-modifier-for-k8s-fips version 0.9.5-r2 fixes 1 vulnerabilities: CVE-2026-27145...

CLEANSTART-2026-KM76344 Security fixes in volume-modifier-for-k8s 0.9.5-r2

Package volume-modifier-for-k8s version 0.9.5-r2 fixes 2 vulnerabilities: CVE-2026-27145, CVE-2026-33811...

Linux Distros Unpatched Vulnerability : CVE-2026-63299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify...

CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

UBUNTU-CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

CVE-2026-63299

An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...

CVE-2026-63299

CVE-2026-63299 is a concrete issue in LXD where an authenticated user can bypass project-level disk and volume limits. The vulnerability arises from two code paths: (1) storagePoolVolumeTypePostMove does not perform limits.AllowVolumeCreation when moving a volume across projects, and (2) volume s...