rootpwn

high · CVSS v3 7.1

CVE-2026-93258

In the Linux kernel, the following vulnerability has been resolved: ocfs2: do not use make_bad_inode() in ocfs2_read_ino…

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full() This reverts commit 58b6fcd2ab34 ("ocfs2: mark inode bad upon validation failure during read"). Since 'make_bad_inode()' resets inode type to S_IFREG, doing this for directory inode during active VFS lookup is likely to confuse the latter, including VFS_BUG_ON_INODE() triggered in this case.

Scores

Severity
high
CVSS v2
6.4
CVSS v3
7.1
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

high

CVE-2026-96751

pmTicket Project-Management-Software is vulnerable to remote SQL injection via the setSync function in add_project.php. Attackers can manipulate the conn_settings argument to execute arbitrary SQL, potentially exposing or altering sensitive data.

View analysis

high

CVE-2026-96762

kvcache-ai mooncake up to 0.3.12/0.3.13.post1 has an authorization bypass in the UnmountSegment RPC Path Handler. Attackers can manipulate client_id/segment_id to gain unauthorized access. Remote exploitation is possible.

View analysis

high

CVE-2026-96803

A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fallBack API Endpoint. Such manipulation of the argument fallBackSql leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

View analysis

high

CVE-2026-96884

A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

View analysis