CVE-2026-74592

A flaw was found in the Linux kernel's Integrity Measurement Architecture IMA. When a file is truncated, the system's integrity policy hooks are not properly instantiated, preventing the action cache flags from being reset. This oversight means that after truncation, the file is not re-collected,...

CVE-2026-74671

A flaw was found in the Linux kernel's Integrity Measurement Architecture IMA subsystem. The xattrverify function, which verifies extended attributes, incorrectly mixes int and sizet data types in its digest-length check. This can lead to an integer underflow when processing a truncated extended...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ima: fixed the buffer overflow issue in imaeventdigestinitcommon. The function imaeventdigestinit calls imaeventdigestinitcommon, using HASHALGOLAST. This value is then used to access the array hashdigestsize, resulting in a buff...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, if the IMA appraisal method is used with the “imaappraiselog” boot parameter, lockdown can be circumvented using kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents the “imaappraiselog” parameter from being set during boot, but this does not cover...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ima: Fixed a potential memory leak in imainitcrypto. If the SHA1 template is unable to be allocated, IMA fails to initialize and exits without freeing the imaalgoarray. Adding the necessary kfree call for imaalgoarray will preven...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, a underflow of a sizet variable in the IMA-ADPCM and MS-ADPCM audio decoders led to a heap-buffer-overflow issue through the RDPSND audio channel. In libfreerdp/codec/dsp.c, the IMA-ADPCM and MS-ADPCM decode...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ima: Avoid blocking in the RCU read-side critical section. A panic occurs in imamatchpolicy: BUG: Unable to handle a NULL pointer dereferencing in the kernel at 0000000000000010. PGD 42f873067 P4D 0 Oops: 0000 1 SMP NOPTI CPU:...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server could cause the FreeRDP client to crash by sending audio data in IMA ADPCM format with an invalid initial step index value = 89. The invalid step index was read directly from the netwo...

Astra Linux – Vulnerability in libsdl2

In SDL Simple DirectMediaLayer versions 2.x through 2.0.9, there is a heap-based buffer over-read issue in the FillIMAADPCMblock function, caused by an integer overflow in the IMAADPCMDecode function in the audio/SDLwave.c file...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ima: Fixed a potential integer overflow in imaappraisemeasurement. When ima-modsig is enabled, the rc parameter passed to evmverifyxattr may be negative, which could lead to an integer overflow issue...

SUSE CVE-2026-74592

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

CVE-2026-74671

In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart = iint-imahash-length sizeof yields sizet, so the usual arithmetic conversions...

AZL-97203 CVE-2026-74671 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart = iint-imahash-length sizeof yields sizet, so the usual arithmetic conversions...

CVE-2026-74592

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

AZL-97362 CVE-2026-74592 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

UBUNTU-CVE-2026-74592

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

CVE-2026-74592

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...

CVE-2026-74671

CVE-2026-74671 is an out-of-bounds read in the Linux kernel's IMA (Integrity Measurement Architecture) subsystem, specifically in the xattr_verify() function. The root cause is a type mismatch between int and size_t in the digest-length check: sizeof() promotes the entire left-hand expression to ...

CVE-2026-74671 ima: fix out-of-bounds read in xattr_verify()

In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart = iint-imahash-length sizeof yields sizet, so the usual arithmetic conversions...

EUVD-2026-64358

In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart = iint-imahash-length sizeof yields sizet, so the usual arithmetic conversions...