1041288 matches found
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: BPF: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs there. Add support to the verifier to explicitly reject attempts to lo...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed the signedness bug in sdmav40processtrapirq The “instance” variable needs to be signed for error handling to work properly...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fixed ext2setsize when len is page-aligned. The PAGEALIGNx macro returns the next highest value that is a multiple of the page size. However, if x is already page-aligned, it simply returns x. Therefore, if x is passed ...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: bounds: Use the correct number of bits for power-of-two CONFIGNRCPUS The function bitsper rounds up to the next power of two when a power-of-two value is passed to it. This can cause crashes on some machines and configurations...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Bail out from dwc3gadgetexit if dwc-gadget is NULL. There exists a possible scenario in which dwc3gadgetinit may fail: during the switch between peripheral and host modes in dwc3setmode, and if a pending gadget...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: The use of a DMA pool to manage DMA descriptors has been implemented. For architectures like Microblaze or Arm64 where this API is used, DMADIRECTREMAP is set, which means that dmaalloccoherent may remap...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fixed a NULL pointer dereference in calctxv4l2initformats. In calctxv4l2initformats, devmkzalloc is assigned to ctx-activefmt, and there is a dereference of it afterward. This could lead to a NULL pointer...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: PCI: Fixed a use-after-free in pcibusreleasedomainnr. The commit c14f7ccc9f5d “PCI: Assign PCI domain IDs using idaalloc” introduced a use-after-free bug during the bus removal process. This issue was discovered with kfence:...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: regmap-irq: Fixed an out-of-bounds access when allocating config buffers When allocating the 2D array for handling IRQ type registers in regmapaddirqchipfwnode, the intention is to allocate a matrix with numconfigbases rows and...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Avoid using prinfo with a spin lock in cblistinitgeneric. prinfo is called with the rtp-cbsgbllock spin lock locked. Since prinfo calls printk, which may sleep, this will result in a bug like the following: 0.206455...
RHSA-2026:58570 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:58571 Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:58568 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:58569 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:58567 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:58566 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Bulletin has no description...
Malicious Package
Overview vite-plugin-bug-tracker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
grafana security, bug fix, and enhancement update
10.2.6-23 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280...
SUSE CVE-2026-74701
In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in keyextract When a packet arrives on an ARPHRDNONE device e.g. TUN, ovsflowkeyextract trusts the user-provided skb-protocol field: if it is ETHPTEB, the packet is classified as...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gcc: cpp-16.2.1-2.hum1 aarch64, x8664 gcc-16.2.1-2.hum1 aarch64, x8664 gcc-c++-16.2.1-2.hum1 aarch64, x8664 gcc-gdb-plugin-16.2.1-2.hum1 aarch64, x8664 gcc-gfortran-16.2.1-2.hum1 aarch64, x8664...