SUSE-SU-2026:20564-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer bsc1254408. - CVE-2025-39880: ceph: fix race condition validating rparent before applying state...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entries past the 'end' entry. This fixes the following KASAN reported issue:...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba, specifically in the vfsstreamsxattr module. In this module, uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content, which may include sensitive data, resulting in an information...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: fixed a slab-out-of-bounds read in eaget During the “sizecheck” step in eaget, the code checks whether the extended attribute list xattr size matches easize. If not, it logs “eaget: invalid extended attribute” and calls...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfs: Do not propagate ENODATA disk errors into the xattr code. ENODATA also known as ENOATTR has a very specific meaning in the xfs xattr code: it indicates that the requested attribute name could not be found. However, a medium...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005155 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of newea in eabuffer syzbot reports that lzo1x1docompress is using...

Advisory ROSA-SA-2026-3114

software: samba 4.19 WASP: ROSA-CHROME unaffected versions = samba-4.19 affected versions samba-4.19 CVE-ID: CVE-2025-10230 BDU-ID: 2025-13037 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability exists in the WINS name resolution server implementation of the Samba networking suite due to failure to ta...

ROS-20260126-73-0035

A vulnerability in the ext4xattrinodedecrefall function of the fs/ext4/xattr.c component of the Linux operating system kernel is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Azure Linux 3.0 Security Update: samba (CVE-2021-44142)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44142 advisory. - The Samba vfsfruit module uses extended file attributes EA, xattr to provide ...enhanced compatibility with...

MiracleLinux 8 : kernel-4.18.0-240.el8 (AXSA:2021-1489:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1489:04 advisory. kernel: use after free in the video driver leads to local privilege escalation CVE-2019-9458 kernel: use-after-free in drivers/bluetooth/hcildisc.c...

SUSE CVE-2025-68820

In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4rawinode If ext4getinodeloc fails e.g. if it returns -EFSCORRUPTED, iloc.bh will remain set to NULL. Since ext4xattrinodedecrefall lacks error checking, this will lead to a null pointer...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004390)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004390 advisory. In f2fsxattrgenericlist of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000946 advisory. The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004046)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004046 advisory. In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001458 advisory. In f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry. Tenabl...

CVE-2025-68784

In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchksetupxattrbuf function can allocate a new value buffer, which means that any reference to ab-value before the call could become a dangling pointer. Fix this by moving an assignment t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001993 advisory. The Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr state is consistent with a requested replacement, which allows local...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002860)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002860 advisory. The ext4xattrcheckentries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002925)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002925 advisory. Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4xattrsetentry function. An attacker could exploit this by operating on a mounte...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003268)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003268 advisory. The ext4xattrcheckentries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a...