Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500589)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500589 advisory. - iommu/amd: Force device table to maximum size Suravee Suthikulpanit Orabug: 40172712 CVE-2024-21963 - drbd: fix 'LOGIC BUG' in drbdalbeginiononblock Lar...

Unbreakable Enterprise kernel security update

5.4.17-2136.361.4.1 - iommu/amd: Force device table to maximum size Suravee Suthikulpanit Orabug: 40172712 CVE-2024-21963 - x86/microcode/AMD: Increase PATCHMAXSIZE for Family 1Ah Saeed Mirzamohammadi Orabug: 40172712 5.4.17-2136.361.4 - vhost-scsi: zero misaligned I/O bounce pages Shubham Antil...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recvdlessread receives a PDATAREPLY from a peer into the bio of an outstanding read request. The peer-supplied payload length is passed as the signed int datasize, and t...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500573)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500573 advisory. - drbd: fix 'LOGIC BUG' in drbdalbeginiononblock Lars Ellenberg Orabug: 39130967 CVE-2026-23356 - ipv4: validate checksumstart before completing...

Siemens SIMATIC S7-1500 TM MFP Improper Resource Locking (CVE-2026-23356)

In the Linux kernel, the following vulnerability has been resolved: drbd: fix 'LOGIC BUG' in drbdalbeginiononblock Even though we check that we 'should' be able to do lcgetcumulative while holding the device-allock spinlock, it may still fail, if some other code path decided to do lctrylock with...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drbd: Balance RCU calls in drbdadmdumpdevices Make drbdadmdumpdevices call rcureadlock before rcureadunlock is called. This has been detected by the Clang thread-safety analyzer...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drbd: fixed “LOGIC BUG” in drbdalbeginiononblock Although we verify that we should be able to perform lcgetcumulative while holding the device-allock spinlock, it may still fail if another code path decides to use lctrylock at an...

USN-8816-4 linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

USN-8816-3: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

USN-8816-2 linux-gcp, linux-gcp-7.0, linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drbd: Use of “free” after calling drbdcreatedevice The drbdDestroyConnection function frees the “connection” object. Therefore, it is necessary to use the safe iterator to prevent a use of the freed resource after the initial...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104555 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recvdlessread receives a PDATAREPLY...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098708)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098708 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: add missing krefget in handlewriteconflicts With two-primaries enabled, DRBD tries to detec...

Linux kernel Block Device Heap Buffer Overflow DoS

The vulnerability of the drbdreqnew function in the drivers/block/drbd/drbdreq.c file of the Linux kernel’s block devices driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9558: MDR: Post-upgrade 4.21 to 4.22 DRPolicy validation failure in Metro DR DFBUGS-9404: Backport to...

SUSE CVE-2026-72014

In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recvdlessread receives a PDATAREPLY from a peer into the bio of an outstanding read request. The peer-supplied payload length reaches it as the signed int datasize, and...

Linux Distros Unpatched Vulnerability : CVE-2026-72014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drbd: reject data replies with an out-of-range payload size recvdlessread receives a PDATAREPLY from a peer into the bio of an outstanding read request. The...

CVE-2026-72014

A flaw was found in DRBD, a component of the Linux kernel. A malicious or man-in-the-middle DRBD peer can send a specially crafted data reply with an out-of-range payload size. This incorrect size calculation can lead to an out-of-bounds write, allowing the attacker to copy arbitrary data past a...

Linux kernel Block Device Driver DoS

The vulnerability in the reqmod function within drivers/block/drbd/drbdreq.c of the Linux kernel block device driver is related to dereferencing an invalid pointer. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100759 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: Balance RCU calls in drbdadmdumpdevices Make drbdadmdumpdevices call rcureadlock before...