Detections
Analytics

Chainguard: linux-desktop-7.2-bootc: security update to 7.2.7-r0

medium Tenable Self-Hosted Container Security Plugin ID 474661

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid
 sectors_per_cluster in the boot sector is_boot_sector_ntfs() checks the boot sector's sectors_per_cluster
 field with a range test that rejects 0x81..0xf3 but accepts 0 and other non-power-of-two counts. A zero
 value reaches parse_ntfs_boot_sector(): sectors_per_cluster_bits = ffs(sectors_per_cluster) - 1; ...
 vol->cluster_size = vol->sector_size << sectors_per_cluster_bits; ffs(0) is 0, so sectors_per_cluster_bits
 becomes (unsigned)-1 and the shift is undefined: UBSAN: shift-out-of-bounds in fs/ntfs/super.c:673:39
 shift exponent 4294967295 is too large for 32-bit type 'int' This change rejects any non-power-of-two
 value, since it feeds the aforementioned shift via ffs() - 1, which only yields the correct shift for a
 power of two. (CVE-2026-98135)

Solution

Update the linux-desktop-7.2-bootc library and its related packages to version 7.2.7-r0 or later.

Plugin Details

Severity: Medium

ID: 474661

Version: Revision 1.1

Type: Local

Published: 10/16/2026

Updated: 10/16/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.68

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-98135

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 9/25/2026

Reference Information

CVE: CVE-2026-98135