Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Skipping the “reserved bytes” warning after unmounting after a log cleanup failure. After the recent changes made by commit c2e39305299f01 “btrfs: clearing the extent buffer when writing fails” and its follow-up fix,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in memwrite In memwrite, the temporary array returned by parseintarrayuser must be released on all exit paths. The array variable is converted to use cleanup.h’s scope-based cleanup...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: BPF: Preserve pointer spill metadata during half-slot cleanup The cleanfuncstate function cleans dead stack slots in 4-byte halves. When the high half of a STACKSPILL slot is dead and the low half remains alive, cleanup converts...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fixed a possible nullptr case in the HWV cleanup/check process. The “probe” function should fail for power domains of the HWVOTER type. This driver unconditionally tried to perform cleanup operations on...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: cifs: fixed handlecache and multiuser In multiuser mode, each individual user has its own tcon structure for the shared resource, and thus they have their own handle for the cached directory. When unmounting such a shared...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In the ISO section, there was a issue where references to the socket would leak after the socket is released. The function isosockkill checks whether !sockflagsk, SOCKZAPPED is true, and also checks whether...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/disp: fixed a use-after-free in error handling of nouveauconnectorcreate. We cannot simply free the connector after calling drmconnectorinit on it. We need to clean up the DRM-related aspects first. This may not fix a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: nvmem: core: fix cleanup after devsetname If devsetname fails, we may leak nvmem-wpgpio because the cleanup does not handle it properly. While a minimal fix would be to add the gpiodput call, we can improve the situation by...

ROS-20260824-73-0027

The vulnerability in gpac is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260824-73-0013

The vulnerability in gobgp is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

AZL-97299 CVE-2026-74604 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce "thermal/drivers/hwmon: Cleanup coding style a bit" that introduced a use-after-free into the error path of thermaladdhwmonsysfs by removing a...

CVE-2026-74680

This vulnerability affects the Linux kernel 's cxacru USB ATM driver (drivers/usb/atm/cxacru.c). The root cause is a missing cleanup in cxacru_cm(): when an error occurs while submitting or waiting for snd_urb, the function returns early without killing the already-submitted rcv_urb, leaving it i...

CVE-2026-74680 usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcvurb on error in cxacrucm If cxacrucm encounters an error while submitting or waiting for sndurb, it aborts and returns the error without killing the already submitted rcvurb. This leaves the...

CVE-2026-74680 usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcvurb on error in cxacrucm If cxacrucm encounters an error while submitting or waiting for sndurb, it aborts and returns the error without killing the already submitted rcvurb. This leaves the...

CVE-2026-45099 Terragrunt: Arbitrary File Deletion via Malicious Module Manifest

Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.0.4, Terragrunt trusts paths decoded from a downloaded module's .terragrunt-module-manifest during fileManifest.Clean in internal/util/file.go. A malicious or...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to axios-1.12.2.tgz (CVE-2026-25639, CVE-2026-39865)

Summary Axios is vulnerable to a Improper Check for Unusual or Exceptional Conditions Complete Denial of Service DoS, Uncontrolled Resource Consumption forcefully crashing the client application backend attacks. This vulnerability affects IBM Spectrum Control. Vulnerability Details...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001491 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces wilcnetdevcleanup...

CVE-2026-74363

A flaw was found in the Linux kernel's BPF filesystem bpffs. An incorrect inode cleanup process allowed an inode and its associated symlink data to be freed immediately, without proper synchronization. A local attacker could exploit this by concurrently unlinking a file while another process was...

CVE-2026-74302

A flaw was found in the Bluetooth subsystem of the Linux kernel. During the unregistration of a Bluetooth device, the system fails to properly disable timers before freeing the associated memory. This can lead to a use-after-free vulnerability, where the system attempts to access memory that has...

CVE-2026-74280

A flaw was found in the Linux kernel's marvell/octeontx cryptographic driver. This issue occurs during Direct Memory Access DMA cleanup, where an incorrect loop index is used. This can lead to memory leaks by failing to unmap successfully mapped entries and repeatedly attempting to unmap already...