CVE-2026-98686

A flaw was found in the Linux kernel's SMB Server Message Block client. When extending a file using a zero-range operation, cached memory pages past the previous end-of-file boundary are not properly discarded. A local user can exploit this vulnerability to view stale or previously buffered data...

CVE-2026-98686

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3zerorange removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold data...

PT-2026-116902

In the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data before zeroing a range smb3 zero range emulates FALLOC FL ZERO RANGE by invalidating the page cache over the target range with truncate pagecache range and then issuing FSCTL SET ZERO DATA to the...

CVE-2026-98137

In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an error ntfsdiozerorange returns either 0 or a negative errno from blkdevissuezeroout; it never returns a positive value. The zeroing failure check in ntfsattrfallocate therefore...

CVE-2026-98126

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOCFLZERORANGE is used without FALLOCFLKEEPSIZE, smb3zerorange may extend EOF without checking RLIMITFSIZE, allowing the file to grow beyond the caller's file-size limit. Fix th...

PT-2026-98788

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 zero range function may extend the End of File EOF without verifying the RLIMIT FSIZE limit when FALLOC FL ZERO RANGE is used without...

PT-2026-98799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs dio zero range function fails to correctly handle errors from blkdev issue zeroout. Because the failure check in ntfs attr fallocate did...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fixed ext2setsize when len is page-aligned. The PAGEALIGNx macro returns the next highest value that is a multiple of the page size. However, if x is already page-aligned, it simply returns x. Therefore, if x is passed ...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsdozerorange function in the fs/f2fs/file.c module of the F2FS file system support in Linux kernel involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a attacker to cause service failures...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000935 advisory. The ext4zerorange function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service BUG via a crafted fallocate zero-range...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001947 advisory. The ext4zerorange function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service BUG via a crafted fallocate zero-range...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002226)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002226 advisory. The ext4zerorange function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service BUG via a crafted fallocate zero-range...

CVE-2025-68796 f2fs: fix to avoid updating zero-sized extent in extent cache

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating zero-sized extent in extent cache As syzbot reported: F2FS-fs loop0: updateextenttreerange: extent len is zero, type: 0, extent 0, 0, 0, age 0, 0 ------------ cut here ------------ kernel BUG at...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989361 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on block address in f2fsdozerorange As Yanming reported in bugzilla:...

PT-2026-2528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the F2FS filesystem related to extent cache management. Specifically, the issue involves the potential addition of a zero-sized extent into the...

SUSE CVE-2023-53323

In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2setsize when len is page aligned PAGEALIGNx macro gives the next highest value which is multiple of pagesize. But if x is already page aligned then it simply returns x. So, if x passed is 0 in daxzerorange...

CVE-2023-53323 ext2/dax: Fix ext2_setsize when len is page aligned

In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2setsize when len is page aligned PAGEALIGNx macro gives the next highest value which is multiple of pagesize. But if x is already page aligned then it simply returns x. So, if x passed is 0 in daxzerorange...

CVE-2023-53323

In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2setsize when len is page aligned PAGEALIGNx macro gives the next highest value which is multiple of pagesize. But if x is already page aligned then it simply returns x. So, if x passed is 0 in daxzerorange...

SUSE CVE-2015-0275

The ext4zerorange function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service BUG via a crafted fallocate zero-range request...

PT-2022-22947 · Ibm · Ibm Urbancode Deploy

Name of the Vulnerable Software and Affected Versions: IBM UrbanCode Deploy versions 6.2.0.0 through 6.2.7.16 IBM UrbanCode Deploy versions 7.0.0.0 through 7.0.5.11 IBM UrbanCode Deploy versions 7.1.0.0 through 7.1.2.7 IBM UrbanCode Deploy versions 7.2.0.0 through 7.2.3.0 Description: The issue...