306 matches found
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: UM: cpuinfo: Fixed a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar to the following, while we display /proc/cpuinfo. This...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: netrom: A memory leak was fixed in nrheartbeatexpiry. syzbot reported a memory leak in nrcreate. The commit 409db27e3a2e “netrom: Fixed a use-after-free of a listening socket” added sockhold to the nrheartbeatexpiry function. ...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netrom: The double-free issue in nrrouteframe has been fixed. In nrrouteframe, the oldskb is freed immediately, without checking whether nrneigh-ax25 is NULL. As a result, if nrneigh-ax25 is NULL, the calling function will free...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: dm rq: Do not queue the request to blk-mq during DM suspension. DM uses blk-mq's quiesce/unquiesce to stop/start the device mapper queue. However, blk-mq's unquiesce may be triggered by external events, such as changes in the...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: MIPS: cpuinfo: Fixed a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar to the following, while we display /proc/cpuinfo. This...
CVE-2026-23792
An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash...
CVE-2026-23792
An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash...
PT-2026-91001
An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash...
EUVD-2026-77156
An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash...
CVE-2026-23792
An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash...
CVE-2026-23792
A vulnerability in the NR RRC (New Radio Radio Resource Control) component of Samsung Mobile Processors and Modems allows an attacker to crash the baseband by sending unauthenticated downlink RRC Setup messages that are incorrectly handled. Affected chips include Exynos 1080, 2100, 1280, 2200, 13...
WordPress Shirt Product Designer for WooCommerce plugin 1.0.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Evan NR in WordPress Plugin Shirt Product Designer for WooCommerce versions 1.0.4...
5GDescrambler: Locating, Descrambling, and Decoding 5G Scheduling Information (Long Version)
Tracking users in 5G NR has recently been successfully demonstrated by exploiting various side-channels. This allows for identification of individuals, classification of user activity in real time as well as tracking by fingerprinting, affecting billions of users with a 5G subscription and...
WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Evan NR in WordPress Plugin Salon booking system versions = 10.30.26...
CVE-2026-21548
In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed...
CVE-2026-21548
In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed...
CVE-2026-21548: Improper Input Validation
In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed...
CVE-2026-64458
CVE-2026-64458 affects the Linux kernel’s damon subsystem (mm/damon/ops-common). The vulnerability arises from handling extreme monitoring intervals in damon_hot_score(), specifically zero or very high sampling/aggr intervals. Zero sampling interval causes a divide-by-zero in damon_max_nr_accesse...
CVE-2026-63950
In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nrpages to 1 at loop start in trytounmapone Initialize nrpages to 1 at the start of each loop iteration, like folioreferencedone does. Without this, nrpages computed by a previous foliounmapptebatch call can b...