Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed an out-of-bounds access in ‘dcn21linkencodercreate’. An issue was identified in the dcn21linkencodercreate function, where an out-of-bounds access could occur when the hpdsource index was used to reference...

CVE-2026-21391

creationtimestamp| type| source ---|---|--- 2026-09-14 12:33:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4mojdw4nqgh7w 2026-09-14 13:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rcze6a2f 2026-09-14 14:07:14+00:00| seen|...

Astra Linux – Vulnerability in sshfs-fuse

SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 up to 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path. The findbasepath function removes the brackets, leaving a host value that starts with a “-” and is passed directly to ssh as a...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pnode: terminate at peers of source The propagatemnt function handles mount propagation when creating mounts and propagates the source mount tree @sourcemnt to all applicable nodes of the destination propagation mount tree, heade...

Astra Linux – Vulnerability in OpenSSL

Issue summary: Generating excessively long X9.42 DH keys or checking overly long X9.42 DH keys or parameters can be very slow. Applications that use functions like DHgeneratekey to generate an X9.42 DH key may experience prolonged delays. Similarly, applications that use functions like...

Astra Linux – Vulnerability in OpenSSL

Issue Summary: Checking excessively long DH keys or parameters can be very slow. Impact Summary: Applications that use functions like DHcheck, DHcheckex, or EVPPKEYparamcheck to check DH keys or parameters may experience prolonged delays. If the keys or parameters are obtained from an untrusted...

Astra Linux – Vulnerability in Jackson-Databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource...

Astra Linux – Vulnerability in Linux

The bpf verifier in the Linux kernel failed to properly handle truncation of the mod32 destination register when the source register was known to be 0. A local attacker who had the ability to load bpf programs could exploit this vulnerability by performing out-of-bounds reads in kernel memory,...

Astra Linux – Vulnerability in dpkg

In dpkg, the Debian package management system, versions prior to 1.21.8, 1.20.10, 1.19.8, and 1.18.26 are vulnerable to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include debian.tar, the in-place extraction process may...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: devlink: Report devlinkporttypewarn source device. devlinkporttypewarn is intended to be reported for ports that do not have a port type set. However, it is not easy to determine which device driver does not have a devlink por...

CVE-2022-28099

creationtimestamp| type| source ---|---|--- 2026-09-14 12:00:04+00:00| seen| Telegram/jP5i0elPtle8Ek1urEeGQwWyb2IHykjb4RwkAMHe7Tv9BPk 2026-09-15 00:00:21+00:00| published-proof-of-concept| Telegram/jP5i0elPtle8Ek1urEeGQwWyb2IHykjb4RwkAMHe7Tv9BPk...

CVE-2026-90700

creationtimestamp| type| source ---|---|--- 2026-09-14 10:15:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ifo4z5eo3len3...

CVE-2026-90619

creationtimestamp| type| source ---|---|--- 2026-09-14 04:12:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3bzjz64bmjrpe...

CVE-2026-38924

creationtimestamp| type| source ---|---|--- 2026-09-14 04:00:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7r5ymqp4hse4m...

CVE-2026-22706

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:15+00:00| seen| Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4 2026-09-15 00:00:21+00:00| published-proof-of-concept| Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4...

CVE-2026-88861

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:15+00:00| seen| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4 2026-09-15 00:00:21+00:00| published-proof-of-concept| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4...

CVE-2026-20516

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:14+00:00| seen| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4 2026-09-14 03:00:15+00:00| seen| Telegram/hyTMOXILeGPH3mOM6D0YvgOQ4qPuk9nF2x2dv8gC9J0Ss 2026-09-15 00:00:21+00:00| published-proof-of-concept|...

CVE-2026-77771

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:12+00:00| seen| Telegram/LVlgDwbFSGH2dSS06nRHfzXTVGcYZJpOdIuQwz8F82lNw 2026-09-15 00:00:23+00:00| published-proof-of-concept| Telegram/LVlgDwbFSGH2dSS06nRHfzXTVGcYZJpOdIuQwz8F82lNw...

CVE-2026-86547

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:12+00:00| seen| Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY 2026-09-15 00:00:23+00:00| seen| Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY...

CVE-2017-0541

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:12+00:00| seen| Telegram/EPpfD-gVy8aS6WjPAMTAUlj2EpWx-6D3lqr7cSnTTsweZ3U 2026-09-15 00:00:23+00:00| published-proof-of-concept| Telegram/EPpfD-gVy8aS6WjPAMTAUlj2EpWx-6D3lqr7cSnTTsweZ3U...