PT-2026-116726

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.10.0-0021.aarch64 Description A race condition exists in the memory management subsystem when handling anonymous virtual memory areas anon vma. The issue occurs when the anon vma prepare function allocates and initialize...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not ASSERT if the newly created subvolume has already been read. BUG There is a syzbot crash, triggered by the ASSERT during subvolume creation: Assertion failed: !anondev, in fs/btrfs/disk-io.c:1319 ----------- kernel...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-102997 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-102993 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-103000 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-102993 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

attp (0.1.0a0), nanobot-channel-anon (0.1.11) +2 more potentially affected by CVE-2026-90809 via nanobot-ai (>=0.1.4.post4, <=0.2.2)

nanobot-ai PYPI version =0.1.4.post4, =0.1.0, =0.3.0 - runagent-superbrowser 0.1.0 Source cves: CVE-2026-90809 Source advisory: MEND:CVE-2026-90809...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: x86/mm/pat: fixed the handling of VMPAT in COW mappings. The handling of VMPAT does not work correctly in COW mappings: the first PTE or, in fact, all PTEs can be replaced during write faults, causing them to point to anonymou...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: migrate: corrected lock ordering for hugetlb file folio operations Syzbot has identified a deadlock analyzed by Lance Yang: 1 Task 5749: Holds foliolock, then attempts to acquire immaprwsem read lock. 2 Task 5754: Holds...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-82398 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-84310 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-84310 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-84309 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

org.docx4j:docx4j-diffx (8.1.0), org.docx4j:docx4j-docx-anon (8.1.0) +4 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.0)

org.docx4j:docx4j-core MAVEN version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-diffx 8.1.0 - org.docx4j:docx4j-docx-anon 8.1.0 - org.docx4j:docx4j-export-fo 8.1.0 -...

cn.bctools:jvs-starter-word (1.1.0), org.docx4j:docx4j-diffx (8.1.1) +5 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.1)

org.docx4j:docx4j-core MAVEN version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - cn.bctools:jvs-starter-word 1.1.0 - org.docx4j:docx4j-diffx 8.1.1 - org.docx4j:docx4j-docx-anon 8.1.1 -...

com.vladsch.flexmark:flexmark-docx-converter (>=0.50.24, <=0.61.10), org.docx4j:docx4j-diffx (8.1.2) +8 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.2)

org.docx4j:docx4j-core MAVEN version 8.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - com.vladsch.flexmark:flexmark-docx-converter =0.50.24, =0.61.10 - org.docx4j:docx4j-diffx 8.1.2 -...

org.docx4j:docx4j-diffx (8.1.3), org.docx4j:docx4j-docx-anon (8.1.3) +7 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.3)

org.docx4j:docx4j-core MAVEN version 8.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-diffx 8.1.3 - org.docx4j:docx4j-docx-anon 8.1.3 - org.docx4j:docx4j-export-fo 8.1.3 -...

org.docx4j:docx4j-diffx (8.1.7), org.docx4j:docx4j-docx-anon (8.1.7) +3 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.7)

org.docx4j:docx4j-core MAVEN version 8.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-diffx 8.1.7 - org.docx4j:docx4j-docx-anon 8.1.7 - org.docx4j:docx4j-jaxb-internal 8.1.7 -...

org.docx4j:docx4j-diffx (8.2.0), org.docx4j:docx4j-documents4j-local (8.2.0) +7 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.2.0)

org.docx4j:docx4j-core MAVEN version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-diffx 8.2.0 - org.docx4j:docx4j-documents4j-local 8.2.0 - org.docx4j:docx4j-documents4j-remote...

org.docx4j:docx4j-diffx (8.2.1), org.docx4j:docx4j-documents4j-local (8.2.1) +7 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.2.1)

org.docx4j:docx4j-core MAVEN version 8.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-diffx 8.2.1 - org.docx4j:docx4j-documents4j-local 8.2.1 - org.docx4j:docx4j-documents4j-remote...