Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: virtio/vsock: Fixed an uninit-value issue in virtiotransportrecvpkt KMSAN reported the following uninit-value access issues: ===================================================== BUG: KMSAN: uninit-value in...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed the signedness bug in sdmav40processtrapirq The “instance” variable needs to be signed for error handling to work properly...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bounds: Use the correct number of bits for power-of-two CONFIGNRCPUS The function bitsper rounds up to the next power of two when a power-of-two value is passed to it. This can cause crashes on some machines and configurations...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: fixed the issue where a new block group that becomes unused after creation could lead to a use-after-free condition. If a task creates a new block group and that block group becomes unused before it is fully created, durin...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: The use of a DMA pool to manage DMA descriptors has been implemented. For architectures like Microblaze or Arm64 where this API is used, DMADIRECTREMAP is set, which means that dmaalloccoherent may remap...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: kho: Make sure that the scratch size is always aligned by CMAMINALIGNMENTBYTES. When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES, since they will be released as MIGRATECMA. This is not done when...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ICE: Fixed ‘scheduling while atomic’ in aux critical error interrupts There’s a kernel bug related to processing aux critical error interrupts in icemiscintr: 2100.917085 BUG: Scheduling while atomic: swapper/15/0/0x00010000… …...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: bpf, cgroup: Fixed a kernel bug in purgeeffectiveprogs Syzkaller reported a triggered kernel bug as follows: ------------ Cut here ----------- Kernel bug at kernel/bpf/cgroup.c:925! Invalid opcode: 0000 1 PREEMPT SMP NOPTI CPU...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iommu/dma-iommu: Fixed an error in assigning the length of the scatterlist in the P2PDMA path. In iommudmamapsg, when handling PCI P2PDMA cases, the DMA length of the current scatterlist segment s is incorrectly assigned from the...

RHSA-2026:58570 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:58571 Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:58568 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:58569 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:58567 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:58566 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Bulletin has no description...

Malicious Package

Overview vite-plugin-bug-tracker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

grafana security, bug fix, and enhancement update

10.2.6-23 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280...

SUSE CVE-2026-74701

In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in keyextract When a packet arrives on an ARPHRDNONE device e.g. TUN, ovsflowkeyextract trusts the user-provided skb-protocol field: if it is ETHPTEB, the packet is classified as...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gcc: cpp-16.2.1-2.hum1 aarch64, x8664 gcc-16.2.1-2.hum1 aarch64, x8664 gcc-c++-16.2.1-2.hum1 aarch64, x8664 gcc-gdb-plugin-16.2.1-2.hum1 aarch64, x8664 gcc-gfortran-16.2.1-2.hum1 aarch64, x8664...

AZL-97110 CVE-2026-74696 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO maxqlen accounting across reuseport migration A listener's TCPFASTOPEN maxqlen stops being accurate and lets through far more pending Fast Open requests than it was configured for. This only shows up with SOREUSEPORT...