[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-45984":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":87,"related":88,"reserved_at":9,"published_at":105,"modified_at":106,"state":107,"summary":108,"references_raw":117,"kevs":193,"epss":194,"epss_history":197,"metrics":315,"affected":323},"CVE-2026-45984","In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Fix use-after-free in iomap inline data write path\n\nThe inline data buffer head (dibh) is being released prematurely in\ngfs2_iomap_begin() via release_metapath() while iomap->inline_data\nstill points to dibh->b_data. This causes a use-after-free when\niomap_write_end_inline() later attempts to write to the inline data\narea.\n\nThe bug sequence:\n1. gfs2_iomap_begin() calls gfs2_meta_inode_buffer() to read inode\n   metadata into dibh\n2. Sets iomap->inline_data = dibh->b_data + sizeof(struct gfs2_dinode)\n3. Calls release_metapath() which calls brelse(dibh), dropping refcount\n   to 0\n4. kswapd reclaims the page (~39ms later in the syzbot report)\n5. iomap_write_end_inline() tries to memcpy() to iomap->inline_data\n6. KASAN detects use-after-free write to freed memory\n\nFix by storing dibh in iomap->private and incrementing its refcount\nwith get_bh() in gfs2_iomap_begin(). The buffer is then properly\nreleased in gfs2_iomap_end() after the inline write completes,\nensuring the page stays alive for the entire iomap operation.\n\nNote: A C reproducer is not available for this issue. The fix is based\non analysis of the KASAN report and code review showing the buffer head\nis freed before use.\n\n[agruenba: Take buffer head reference in gfs2_iomap_begin() to avoid\nleaks in gfs2_iomap_get() and gfs2_iomap_alloc().]",null,[11,20],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":24,"abstraction":25,"likelihood_of_exploit":9,"capec":26},"CWE-826","Premature Release of Resource During Expected Lifetime","The product releases a resource that is still intended to be used by itself or another actor.","Incomplete","Base",[],[],[],[],[31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85],{"_key":32},"DEBIAN-CVE-2026-45984",{"_key":34},"SUSE-SU-2026:22108-1",{"_key":36},"SUSE-SU-2026:22127-1",{"_key":38},"SUSE-SU-2026:22112-1",{"_key":40},"SUSE-SU-2026:22099-1",{"_key":42},"SUSE-SU-2026:22137-1",{"_key":44},"SUSE-SU-2026:2482-1",{"_key":46},"SUSE-SU-2026:2591-1",{"_key":48},"OPENSUSE-SU-2026:20965-1",{"_key":50},"SUSE-SU-2026:2632-1",{"_key":52},"SUSE-SU-2026:2631-1",{"_key":54},"SUSE-SU-2026:2630-1",{"_key":56},"SUSE-SU-2026:2638-1",{"_key":58},"SUSE-SU-2026:2658-1",{"_key":60},"SUSE-SU-2026:22117-1",{"_key":62},"SUSE-SU-2026:22433-1",{"_key":64},"SUSE-SU-2026:22458-1",{"_key":66},"USN-8492-4",{"_key":68},"RHSA-2026:27789",{"_key":70},"RHSA-2026:33743",{"_key":72},"RHSA-2026:35894",{"_key":74},"RHSA-2026:36049",{"_key":76},"RHSA-2026:36767",{"_key":78},"RHSA-2026:38902",{"_key":80},"UBUNTU-CVE-2026-45984",{"_key":82},"USN-8492-5",{"_key":84},"USN-8575-1",{"_key":86},"USN-8576-1",[],[89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104],{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":48},{"_key":50},{"_key":52},{"_key":54},{"_key":56},{"_key":58},{"_key":60},{"_key":62},{"_key":64},"2026-05-27T12:18:42.964Z","2026-07-15T00:51:55.010Z","Analyzed",{"cisa_kev":109,"cisa_ransomware":109,"cisa_vendor":9,"epss_severity":110,"epss_score":111,"severity":112,"severity_score":113,"severity_version":114,"severity_source":115,"severity_vector":116,"severity_status":107},false,"low",0.0031,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[118,124,128,132,136,140,144,148,152,158,163,168,173,177,181,185,189],{"url":119,"sources":120,"tags":122},"https://git.kernel.org/stable/c/1403989d1b502f4a2c0d0b42ccf1c25748442eff",[115,121],"nvd",[123],"Patch",{"url":125,"sources":126,"tags":127},"https://git.kernel.org/stable/c/1cae1bafdf9caa9b462b19af06b1a06902e4e142",[115,121],[123],{"url":129,"sources":130,"tags":131},"https://git.kernel.org/stable/c/764c3c84b5683e608f43735c803a5f415046686c",[115,121],[123],{"url":133,"sources":134,"tags":135},"https://git.kernel.org/stable/c/d87268326b277af3665237ac76a73dd9fa8e21b4",[115,121],[123],{"url":137,"sources":138,"tags":139},"https://git.kernel.org/stable/c/87d4954b5c59735a99ea98cb208d47130f6dce7d",[115,121],[123],{"url":141,"sources":142,"tags":143},"https://git.kernel.org/stable/c/6d76febba07c40bcf358f63216d36ea68cf1c215",[115,121],[123],{"url":145,"sources":146,"tags":147},"https://git.kernel.org/stable/c/815ddd27c0c7171a99fe802fdb19098ddef8b19d",[115,121],[123],{"url":149,"sources":150,"tags":151},"https://git.kernel.org/stable/c/faddeb848305e79db89ee0479bb0e33380656321",[115,121],[123],{"url":153,"sources":154,"tags":155},"https://access.redhat.com/security/cve/CVE-2026-45984",[115],[156,157],"VDB Entry","X Refsource REDHAT",{"url":159,"sources":160,"tags":161},"https://bugzilla.redhat.com/show_bug.cgi?id=2481922",[115],[162,157],"Issue Tracking",{"url":164,"sources":165,"tags":166},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45984.json",[115],[167],"X Sadp Csaf Vex",{"url":169,"sources":170,"tags":171},"https://access.redhat.com/errata/RHSA-2026:27789",[115],[172,157],"Vendor Advisory",{"url":174,"sources":175,"tags":176},"https://access.redhat.com/errata/RHSA-2026:33743",[115],[172,157],{"url":178,"sources":179,"tags":180},"https://access.redhat.com/errata/RHSA-2026:35894",[115],[172,157],{"url":182,"sources":183,"tags":184},"https://access.redhat.com/errata/RHSA-2026:36049",[115],[172,157],{"url":186,"sources":187,"tags":188},"https://access.redhat.com/errata/RHSA-2026:36767",[115],[172,157],{"url":190,"sources":191,"tags":192},"https://access.redhat.com/errata/RHSA-2026:38902",[115],[172,157],[],{"date":195,"score":111,"percentile":196},"2026-07-05",0.22778,[198,202,205,209,212,215,219,222,225,228,231,234,237,240,243,246,249,252,255,259,262,265,268,271,273,276,278,282,285,288,291,294,296,299,303,306,309,311,314],{"date":199,"score":200,"percentile":201},"2026-05-28",0.00024,0.07377,{"date":203,"score":200,"percentile":204},"2026-05-29",0.07393,{"date":206,"score":207,"percentile":208},"2026-05-30",0.00012,0.01858,{"date":210,"score":207,"percentile":211},"2026-05-31",0.01851,{"date":213,"score":207,"percentile":214},"2026-06-01",0.01836,{"date":216,"score":217,"percentile":218},"2026-06-02",0.00013,0.02495,{"date":220,"score":217,"percentile":221},"2026-06-03",0.02488,{"date":223,"score":217,"percentile":224},"2026-06-04",0.02491,{"date":226,"score":217,"percentile":227},"2026-06-05",0.02503,{"date":229,"score":217,"percentile":230},"2026-06-06",0.02498,{"date":232,"score":217,"percentile":233},"2026-06-07",0.0244,{"date":235,"score":217,"percentile":236},"2026-06-08",0.02425,{"date":238,"score":217,"percentile":239},"2026-06-09",0.0238,{"date":241,"score":217,"percentile":242},"2026-06-10",0.02388,{"date":244,"score":217,"percentile":245},"2026-06-11",0.02405,{"date":247,"score":217,"percentile":248},"2026-06-12",0.02401,{"date":250,"score":217,"percentile":251},"2026-06-13",0.02394,{"date":253,"score":217,"percentile":254},"2026-06-14",0.02402,{"date":256,"score":257,"percentile":258},"2026-06-15",0.00125,0.02548,{"date":260,"score":257,"percentile":261},"2026-06-16",0.02556,{"date":263,"score":257,"percentile":264},"2026-06-17",0.02564,{"date":266,"score":257,"percentile":267},"2026-06-18",0.02562,{"date":269,"score":257,"percentile":270},"2026-06-19",0.02559,{"date":272,"score":257,"percentile":261},"2026-06-20",{"date":274,"score":257,"percentile":275},"2026-06-21",0.02553,{"date":277,"score":257,"percentile":258},"2026-06-22",{"date":279,"score":280,"percentile":281},"2026-06-23",0.00126,0.02565,{"date":283,"score":280,"percentile":284},"2026-06-24",0.0257,{"date":286,"score":280,"percentile":287},"2026-06-25",0.02581,{"date":289,"score":280,"percentile":290},"2026-06-26",0.02594,{"date":292,"score":280,"percentile":293},"2026-06-27",0.02598,{"date":295,"score":280,"percentile":293},"2026-06-28",{"date":297,"score":280,"percentile":298},"2026-06-29",0.02596,{"date":300,"score":301,"percentile":302},"2026-06-30",0.00238,0.14711,{"date":304,"score":301,"percentile":305},"2026-07-01",0.14793,{"date":307,"score":111,"percentile":308},"2026-07-02",0.22755,{"date":310,"score":111,"percentile":308},"2026-07-03",{"date":312,"score":111,"percentile":313},"2026-07-04",0.22769,{"date":195,"score":111,"percentile":196},[316,321],{"source":115,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":317,"cvss_v4_0":9},{"baseScore":113,"baseSeverity":318,"vectorString":116,"impactScore":319,"exploitabilityScore":320},"HIGH",9.8,4.6,{"source":121,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":322,"cvss_v4_0":9},{"baseScore":113,"baseSeverity":318,"vectorString":116,"impactScore":319,"exploitabilityScore":320},[324,359],{"ecosystem":9,"name":325,"vendor":326,"product":326,"cpe_part":327,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":328},"Linux","linux","a",[329,336,339,342,345,348,351,354,357],{"version":330,"is_range":331,"range_type":115,"version_start":332,"version_start_type":333,"version_end":334,"version_end_type":335,"fixed_in":9},">= d0a22a4b03b8475b7aa3fa41243c26c291407844, \u003C 1403989d1b502f4a2c0d0b42ccf1c25748442eff",true,"d0a22a4b03b8475b7aa3fa41243c26c291407844","including","1403989d1b502f4a2c0d0b42ccf1c25748442eff","excluding",{"version":337,"is_range":331,"range_type":115,"version_start":332,"version_start_type":333,"version_end":338,"version_end_type":335,"fixed_in":9},">= d0a22a4b03b8475b7aa3fa41243c26c291407844, \u003C 1cae1bafdf9caa9b462b19af06b1a06902e4e142","1cae1bafdf9caa9b462b19af06b1a06902e4e142",{"version":340,"is_range":331,"range_type":115,"version_start":332,"version_start_type":333,"version_end":341,"version_end_type":335,"fixed_in":9},">= d0a22a4b03b8475b7aa3fa41243c26c291407844, \u003C 764c3c84b5683e608f43735c803a5f415046686c","764c3c84b5683e608f43735c803a5f415046686c",{"version":343,"is_range":331,"range_type":115,"version_start":332,"version_start_type":333,"version_end":344,"version_end_type":335,"fixed_in":9},">= d0a22a4b03b8475b7aa3fa41243c26c291407844, \u003C d87268326b277af3665237ac76a73dd9fa8e21b4","d87268326b277af3665237ac76a73dd9fa8e21b4",{"version":346,"is_range":331,"range_type":115,"version_start":332,"version_start_type":333,"version_end":347,"version_end_type":335,"fixed_in":9},">= d0a22a4b03b8475b7aa3fa41243c26c291407844, \u003C 87d4954b5c59735a99ea98cb208d47130f6dce7d","87d4954b5c59735a99ea98cb208d47130f6dce7d",{"version":349,"is_range":331,"range_type":115,"version_start":332,"version_start_type":333,"version_end":350,"version_end_type":335,"fixed_in":9},">= d0a22a4b03b8475b7aa3fa41243c26c291407844, \u003C 6d76febba07c40bcf358f63216d36ea68cf1c215","6d76febba07c40bcf358f63216d36ea68cf1c215",{"version":352,"is_range":331,"range_type":115,"version_start":332,"version_start_type":333,"version_end":353,"version_end_type":335,"fixed_in":9},">= d0a22a4b03b8475b7aa3fa41243c26c291407844, \u003C 815ddd27c0c7171a99fe802fdb19098ddef8b19d","815ddd27c0c7171a99fe802fdb19098ddef8b19d",{"version":355,"is_range":331,"range_type":115,"version_start":332,"version_start_type":333,"version_end":356,"version_end_type":335,"fixed_in":9},">= d0a22a4b03b8475b7aa3fa41243c26c291407844, \u003C faddeb848305e79db89ee0479bb0e33380656321","faddeb848305e79db89ee0479bb0e33380656321",{"version":358,"is_range":109,"range_type":115,"version_start":358,"version_start_type":333,"version_end":358,"version_end_type":333,"fixed_in":9},"5.2",{"ecosystem":9,"name":360,"vendor":326,"product":361,"cpe_part":327,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":362},"Linux Kernel","linux kernel",[363,367,371,375,379,383,387],{"version":364,"is_range":331,"range_type":365,"version_start":358,"version_start_type":333,"version_end":366,"version_end_type":335,"fixed_in":9},"gte5.2_lt5.10.252","cpe","5.10.252",{"version":368,"is_range":331,"range_type":365,"version_start":369,"version_start_type":333,"version_end":370,"version_end_type":335,"fixed_in":9},"gte5.11_lt5.15.202","5.11","5.15.202",{"version":372,"is_range":331,"range_type":365,"version_start":373,"version_start_type":333,"version_end":374,"version_end_type":335,"fixed_in":9},"gte5.16_lt6.1.165","5.16","6.1.165",{"version":376,"is_range":331,"range_type":365,"version_start":377,"version_start_type":333,"version_end":378,"version_end_type":335,"fixed_in":9},"gte6.2_lt6.6.128","6.2","6.6.128",{"version":380,"is_range":331,"range_type":365,"version_start":381,"version_start_type":333,"version_end":382,"version_end_type":335,"fixed_in":9},"gte6.7_lt6.12.75","6.7","6.12.75",{"version":384,"is_range":331,"range_type":365,"version_start":385,"version_start_type":333,"version_end":386,"version_end_type":335,"fixed_in":9},"gte6.13_lt6.18.14","6.13","6.18.14",{"version":388,"is_range":331,"range_type":365,"version_start":389,"version_start_type":333,"version_end":390,"version_end_type":335,"fixed_in":9},"gte6.19_lt6.19.4","6.19","6.19.4"]