CLSA-2026-1777616064 kernel: Fix of 264 CVEs

crypto: algifaead - Fix minimum RX size check for decryption CVE-2026-31431 - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl CVE-2026-31431 - crypto: authencesn - reject too-short AAD assoclen8 to match ESP/ESN spec CVE-2026-31431 - crypto: authencesn - Fix src offset when...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the acpidbdisplayobjects function in the drivers/acpi/acpica/dbnames.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CLSA-2026-1768775579 kernel: Fix of 49 CVEs

scsi: ses: Fix slab-out-of-bounds in sesenclosuredataprocess CVE-2023-53803 - md/raid1: Fix stack memory use after return in raid1reshape CVE-2025-38445 - ALSA: usb-audio: Fix out-of-bounds read in sndusbgetaudioformatuac3 CVE-2025-38249 - atm: clip: Fix infinite recursive call of clippush...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fixed a use-after-free in acpiutcopyipackagetoipackage. There is a use-after-free reported by KASAN: BUG: KASAN: use-after-free in acpiutremovereference+0x3b/0x82 Reading of size 1 at addr ffff888112afc460 by task...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid undefined behavior: applying zero offset to a null pointer ACPICA commit: 770653e3ba67c30a629ca7d12e352d83c2541b1e Before this change, the following UBSAN stack trace was seen in Fuchsia: 0 0x000021e4213b3302 in...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Check for a null return value from ACPIALLOCATEZEROED in acpidbconverttopackage. ACPICA commit number: 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0 The ACPIALLOCATEZEROED function may fail; the elements involved might be NULL...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add AMLNOOPERANDRESOLVE flag to Timer ACPICA commit 90310989a0790032f5a0140741ff09b545af4bc5 According to the ACPI specification 19.6.134, no arguments are required to be passed for the ASL Timer instruction. To handle th...

ROS-20261013-73-0067

The vulnerability of the acpica/evregion.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-97445

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance buffer validation in acpiutwalkamlresources Enhance buffer validation in acpiutwalkamlresources to prevent buffer overflows...

SUSE CVE-2026-97450

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate handler object type in two places ACPICA: validate handler object type in acpievhasdefaulthandler and acpievfindregionhandler...

SUSE CVE-2026-97452

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in acpiutcopysimpleobject...

SUSE CVE-2026-97454

In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpipsgetnextfield Add boundary checks in acpipsgetnextfield to prevent out-of-bounds access...

SUSE CVE-2026-97455

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpidsterminatecontrolmethod Fix use-after-free issue in acpidsterminatecontrolmethod by clearing references to method locals and arguments...

CVE-2026-97455

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface Component Architecture ACPICA. When terminating a control method, references to method local variables and arguments are not properly cleared, leading to a use-after-free condition when internal execution state...

CVE-2026-97451

A flaw was found in the Linux kernel's ACPICA Advanced Configuration and Power Interface Component Architecture subsystem. An integer overflow occurs when calculating string or buffer truncation lengths during ACPI operation processing. A local attacker could exploit this vulnerability to trigger...

CVE-2026-97448

A flaw was found in the Linux kernel's ACPI Component Architecture ACPICA subsystem. The acpinsbuildnormalizedpath function fails to validate namespace nodes before processing them, leading to a use-after-free condition. A local user could exploit this flaw to cause a Denial of Service DoS or...

CVE-2026-97444

A flaw was found in the Linux kernel. Missing boundary checks within the ACPICA ACPI Component Architecture subsystem allow out-of-bounds memory access when parsing ACPI bytecode. An attacker capable of supplying malformed ACPI tables can trigger this vulnerability, leading to a kernel crash and ...

SUSE CVE-2026-97444

In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places Add boundary checks in acpipsgetnextnamestring and acpipspeekopcode to prevent out-of-bounds access...

SUSE CVE-2026-97446

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpinscustompackage acpinscustompackage unconditionally dereferences the first element of the package to read the BIX version number, without checking for NULL: if Elements-Common.Type !=...

SUSE CVE-2026-97447

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance OEM ID and Table ID validation in acpiexloadtableop Enhance OEM ID and Table ID validation in acpiexloadtableop to prevent buffer overflows...