IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
Puansız

CVE-2026-98907btrfs: protect sb_write_pointer() with invalidate lock

Linux Linux Yayım: (11 gün önce)

Açıklama

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate lock sb_write_pointer() reads the super block from the block device page cache using read_cache_page_gfp(). This has the same race with BLKBSZSET as the one fixed by commit 3f29d661e568 ("btrfs: sync read disk super and set block size"). Take the mapping invalidate lock around read_cache_page_gfp() to serialize the read against block size changes.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Linux Linux 6.15
linux linux kernel 6.15 – < 6.18.53

Ubuntu düzeltmeleri

  • USN-8961-1 Linux kernel vulnerabilities Ubuntu 22.04, 20.04 · 03.11.2026 · linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure,...
  • USN-8963-1 Linux kernel (NVIDIA Tegra) vulnerabilities Ubuntu 22.04, 20.04 · 03.11.2026 · linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx
  • USN-8959-1 Linux kernel vulnerabilities Ubuntu 26.04, 24.04 · 03.11.2026 · linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle
  • USN-8960-1 Linux kernel (OEM) vulnerabilities Ubuntu 26.04 · 03.11.2026 · linux-oem-7.0

Kaynaklar ve yamalar

Aynı üründe son açıklar — Ubuntu 20.04 LTS

Puansız
CVE-2026-98912

ALSA: seq: oss: Reject reads that cannot fit the next event

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event snd_seq_oss_read() checks whether the next queued OSS sequencer event fits in the remaining userspace buffer before removing it f…

7.5Yüksek
CVE-2026-98911

dpaa2-switch: fix the error path in dpaa2_switch_rx()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx() In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect sinc…

Puansız
CVE-2026-98900

xen/gntalloc: validate grant count before allocation

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before allocation gntalloc_ioctl_alloc() allocates the grant-id array before checking whether the requested count fits within the global grant limit. Coun…

7.8Yüksek
CVE-2026-98899

netfilter: ipset: mark the rcu locked areas properly

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same…