Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: avoid kprobe recursion The function cortexa76erratum1463225debuggerHandler is called when handling debug exceptions and synchronous exceptions from BRK instructions. If the compiler does not inline...

Astra Linux – Vulnerability in Linux, Linux 5.10

Certain Arm Cortex and Neoverse processors, as of 2022-03-08, do not properly prevent cache speculation, also known as Spectre-BHB. Attackers can exploit the shared branch history in the Branch History Buffer BHB to influence mispredicted branches. As a result, cache allocation may allow attacker...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: Fixed the enumeration of protocols in the base protocol. When enumerating the protocols implemented by the SCMI platform using BASEDISCOVERLISTPROTOCOLS, the number of protocols returned is currently validated ...

Astra Linux – Vulnerability in Linux

There is an information disclosure vulnerability in the ARM SIGPAGE functionality of the Linux Kernel v5.4.66 and v5.4.54. The latest version 5.11-rc4 appears to still be vulnerable. A userland application can read the contents of the sigpage, which may lead to the exposure of kernel memory...

Exploit for Out-of-bounds Write in Arm Bifrost_Gpu_Kernel_Driver

CVE-2021-28664-PoC Mali kbase GPU driver UAF CVE-2021-2866...

Linux Distros Unpatched Vulnerability : CVE-2026-80979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: unregister the connection before draining the rx tasklet smcconnfree calls smcismunsetconn only while the link group is still on its device list, and...

CVE-2026-89625

In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghlpoketimer / ghlurb at driver unbind For GHL Guitar Hero Live dongles, sonyprobe arms a periodic timer: ghlmagicpoke the timer callback submits sc-ghlurb, and the URB completion ghlmagicpokecb re-arms the...

DEBIAN-CVE-2026-89588

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

AZL-100082 CVE-2026-80979 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connection before draining the rx tasklet smcconnfree calls smcismunsetconn only while the link group is still on its device list, and never sets conn-killed. smclgrterminatesched unlinks the group...

UBUNTU-CVE-2026-89625

In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghlpoketimer / ghlurb at driver unbind For GHL Guitar Hero Live dongles, sonyprobe arms a periodic timer: ghlmagicpoke the timer callback submits sc-ghlurb, and the URB completion ghlmagicpokecb re-arms the...

CVE-2026-89625

In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghlpoketimer / ghlurb at driver unbind For GHL Guitar Hero Live dongles, sonyprobe arms a periodic timer: ghlmagicpoke the timer callback submits sc-ghlurb, and the URB completion ghlmagicpokecb re-arms the...

UBUNTU-CVE-2026-80979

In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connection before draining the rx tasklet smcconnfree calls smcismunsetconn only while the link group is still on its device list, and never sets conn-killed. smclgrterminatesched unlinks the group...

EUVD-2026-76537

In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghlpoketimer / ghlurb at driver unbind For GHL Guitar Hero Live dongles, sonyprobe arms a periodic timer: ghlmagicpoke the timer callback submits sc-ghlurb, and the URB completion ghlmagicpokecb re-arms the...

CVE-2026-89625

CVE-2026-89625 is a use-after-free in the Linux kernel's hid-sony driver, triggered during unbinding of Guitar Hero Live (GHL) PS4 dongles (VID 0x1430 / PID 0x07bb). The root cause is a race in sony_remove(): timer_delete_sync() does not block re-arming, and usb_free_urb() only drops a reference ...

CVE-2026-89588

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

CVE-2026-89588 ACPI: APEI: GHES: fix ARM section length accounting after header

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

EUVD-2026-76500

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

CVE-2026-89588 ACPI: APEI: GHES: fix ARM section length accounting after header

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

CVE-2026-80979 net/smc: unregister the connection before draining the rx tasklet

In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connection before draining the rx tasklet smcconnfree calls smcismunsetconn only while the link group is still on its device list, and never sets conn-killed. smclgrterminatesched unlinks the group...

EUVD-2026-76302

In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connection before draining the rx tasklet smcconnfree calls smcismunsetconn only while the link group is still on its device list, and never sets conn-killed. smclgrterminatesched unlinks the group...