CVE-2026-98635

A flaw was found in the Linux kernel. An attacker who attaches a specially crafted storage device can cause a Denial of Service DoS or kernel memory corruption. When the kernel revalidates zoned block devices—storage media divided into independent physical regions—it fails to verify that the...

CVE-2026-98081

A flaw was found in the Linux kernel's Btrfs file system when handling zoned storage devices. When an operation to finish a storage zone fails, the system returns early without completing proper cleanup, leaving the block group in an inconsistent state and stranding waiting tasks. A local user...

Linux Distros Unpatched Vulnerability : CVE-2026-98727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifie...

SUSE CVE-2026-98727

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path namespac...

DEBIAN-CVE-2026-98727

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path namespac...

CVE-2026-98727

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path namespac...

CVE-2026-98727

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path namespac...

UBUNTU-CVE-2026-98727

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path namespac...

CVE-2026-98727 nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path namespac...

EUVD-2026-103812

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path namespac...

CVE-2026-98727 nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path namespac...

CVE-2026-98727

The Linux kernel contains a vulnerability in nvme-multipath where the namespace head is incorrectly marked as zoned at allocation time based solely on the command set identifier. If a zone info query returns a zero zone size, the path namespace is registered without zoned limits, but the head con...

PT-2026-116946

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLK FEAT ZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path...

CVE-2026-98727: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path namespac...

CVE-2026-90261

A flaw was found in the btrfs zoned filesystem component of the Linux kernel. During metadata-heavy operations, a specific writeback scenario can prevent the system from properly managing active block groups. This issue can lead to a transaction abortion, forcing the filesystem into a read-only...

CVE-2026-90260

A flaw was found in the Linux kernel's Btrfs zoned filesystem. When a freed-but-still-dirty tree block is written out as zeros, the btreecsumonebio function improperly clears the extent buffer's in-memory content. This can lead to corruption of the extent tree, potentially causing system...

CVE-2026-90266

A flaw was found in the Linux kernel's btrfs zoned filesystem. When metadata over-commitment occurs during a reclaim operation, the btrfsdelayedrefsrsvrefill function may return a transient error -EAGAIN. This error can cause the current transaction to abort, leading to the filesystem being force...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Zoned – Fix for use-after-free due to race condition with dev replace When loading the information of a zone during the creation of a block group, we may encounter a race condition with the device replace operation. This c...

EUVD-2026-86911

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: finish active block group cleanup if callzonefinish fails dozonefinish clears BLOCKGROUPFLAGZONEISACTIVE before finishing the zones. If callzonefinish then fails it returned early, leaving the now inactive block gro...

CVE-2026-98081

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: finish active block group cleanup if callzonefinish fails dozonefinish clears BLOCKGROUPFLAGZONEISACTIVE before finishing the zones. If callzonefinish then fails it returned early, leaving the now inactive block gro...