Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image information block within the current erase block, then utilizes image information regioncount to iterate through entries stored in a fixed...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incomi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146298 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142704)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142704 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142476 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142712)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142712 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses ...

Linux fs/afs/cmservice.c DoS

The vulnerability of the fs/afs/cmservice.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the afsextractvladdrs function in the fs/afs/vllist.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel afs_insert_volume_into_cell Heap Buffer Overflow DoS

The vulnerability in the afsinsertvolumeintocell function within the fs/afs/volume.c component of the Linux kernel operating system is related to an improper implementation of the control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity,...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the afsupdatecell function in the fs/afs/cell.c component of the Linux kernel is related to insufficient resource management during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux fs/afs/rxrpc Heap Buffer Overflow DoS

The vulnerability of the fs/afs/rxrpc.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux afs_get_tree Heap Buffer Overflow DoS

The vulnerability of the afsgettree function in the fs/afs/super.c component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes; however, there is a problem when this limit is actually reached: kafs attempts to create a directory under /proc/net/afs/...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afsupdatevolumestatus The maximum length of volume-vid value is 20 characters. So increase idbuf size up to 24 to avoid overflow. Found by Linux Verification Center linuxtesting.org with SVACE. DH:...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afsgettree afsallocsbi uses kzalloc for memory allocation. And, if ctx-dynroot is not null, as-cell and as-volume are null. In traceafsgettree they are dereferenced. KASAN error message: KASAN...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network namespace to ensure it cancels the work item that keeps the preallocated rxrpc call/conn/peer queue charged before incoming calls are...

john

John the Ripper Esta es la versión "jumbo" mejorada por la comunidad de John the Ripper. Contiene mucho código, documentación y datos aportados por desarrolladores de jumbo y la comunidad de usuarios. Es fácil agregar nuevo código a jumbo, y los requisitos de calidad son bajos, aunque últimamente...

CVE-2026-80877

A flaw was found in the Linux kernel's AFS Andrew File System module. This vulnerability occurs in the afsupdatecell function when it attempts to update a volume list vllist that is empty. Under specific conditions, the old vllist is not properly released, leading to a memory leak. A local attack...

CVE-2026-80878

A flaw was found in the Linux kernel's AFS Andrew File System implementation. This issue occurs when afslookupvolumercu fails to acquire a volume, leading to a resource leak. A local attacker could potentially exploit this flaw to cause a denial of service due to resource exhaustion. Mitigation...

SUSE CVE-2026-97585

In the Linux kernel, the following vulnerability has been resolved: afs: Fix double-unmap of directory block Fix afseditdirremove to use a cleanup function to unmap the block pointed to by afsdiriter::block if it's left pointing to something rather than manually kunmapping the blocks. Manually...