Threat Intelligence Database

A vulnerability in the Linux kernel ext4 filesystem code could leave a stale unwritten extent in the extent status tree after certain block splitting and zeroing operations. This occurs when ext4_split_extent() attempts to split an unwritten extent with specific flags set but fails partially due to lack of space, resulting in inconsistent extent status caching. The issue has been fixed by ensuring the extent status entry is always cached after zeroing out the second part of the extent.

A vulnerability in the Linux kernel's drm/display subsystem related to DisplayPort Multi-Stream Transport (DP MST) handling has been resolved. The issue involves a potential negative shift operation caused by a zero VCPI (Virtual Channel Payload Identifier) value when releasing a timeslot after a DP 2.1 monitor disconnects. This can lead to a shift-out-of-bounds error and kernel warnings or crashes. The flaw occurs because VCPI should never be zero, but the code did not properly handle this case, resulting in an invalid payload mask calculation.

CVE-2026-45838 is a vulnerability related to the bpf subsystem, specifically addressing an issue in end-of-list detection within the cgroup_storage_get_next_key() function. The vulnerability affects Microsoft products including Azure Linux 3.0. No detailed technical exploitation or impact information is provided. There is no CVSS score available for this vulnerability, and no known exploits in the wild have been reported. Patch or remediation status is not confirmed from the provided data.

CVE-2026-45901 relates to a vulnerability involving the netfilter nf_tables component where a commit_mutex usage was reverted in the reset path. The provided information does not include technical details about the nature of the vulnerability or its impact. There is no CVSS score or detailed impact description available. No known exploits in the wild have been reported. The affected products include Microsoft and Azure Linux 3.0 versions. No patch or remediation information is provided, and the vendor advisory content is minimal and does not clarify the fix status.

CVE-2026-46018 is a vulnerability related to ALSA usb-audio where parsing of UAC2 rates is stopped at MAX_NR_RATES. The provided description does not detail the technical nature or impact of the vulnerability. No CVSS score or detailed impact information is available. There are no known exploits in the wild and no patch or remediation information has been provided. The affected products include Microsoft and Azure Linux 3.0 versions. Due to limited information, the severity is assessed as medium based on the potential for audio subsystem issues but lacking explicit impact details.

CVE-2026-45999 is a vulnerability in the erofs component related to an unsigned underflow in the function z_erofs_lz4_handle_overlap(). The vulnerability affects Microsoft products including Azure Linux 3.0. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild. Patch status is not confirmed as no patch or vendor advisory details about remediation are available.

CVE-2026-45943 addresses a vulnerability related to the erofs filesystem, specifically a failure in reading inline data for ztailpacking pclusters. The information provided is limited and does not include technical details about the nature of the vulnerability or its exploitation. There is no CVSS score available, no known exploits in the wild, and no patch or remediation details provided. The affected products include Microsoft and Azure Linux 3.0 versions. Due to the lack of detailed impact or exploit information, the severity is assessed based on the potential for data read failures in the filesystem.

CVE-2026-45997 addresses a vulnerability related to the SCSI subsystem in Microsoft and Azure Linux 3.0 where a missing put_disk() call occurs if device_add(&disk_dev) fails. The provided information does not include detailed technical specifics or exploitation data. No CVSS score is available, and there are no known exploits in the wild. The patch status is not confirmed as no patch or vendor advisory details on remediation are provided.

CVE-2026-45994 is a vulnerability in the ibmasm component related to out-of-bounds (OOB) reads in the command_file_write function caused by missing size checks. The vulnerability affects Microsoft products including Azure Linux 3.0. No CVSS score is provided, and there is no indication of known exploits in the wild. Patch availability is not confirmed from the provided data, and no vendor advisory details about remediation are included.

CVE-2026-46024 is a vulnerability related to a potential null pointer dereference in the function ceph_handle_auth_reply() within libceph. The information provided is limited and does not include technical details beyond the potential null pointer dereference issue. There is no CVSS score or detailed impact description available. No known exploits in the wild have been reported. The affected products include Microsoft and Azure Linux 3.0. No patch or remediation information is provided, and the vulnerability is not related to a cloud service.