Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: platform: exynos4-is: Added a hardware sync wait to fimcishwchangemode In fimcishwchangemode, the function changes camera modes without waiting for hardware completion. This can lead to corrupted data or a system hanging i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disabled the automatic enable of exclusive INTx/IRQs. Currently, for devices that require masking at the irqchip for INTx, i.e., devices without DisINTx support, the IRQ is enabled in the requestirq function, and then...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a memory access violation occurred in irpthreadfunc because the IRP was freed by irp-Complete, and then accessed again during the error handling path. This vulnerability has been fixed in version 3.20.1...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mailbox: mtk-adsp: fixed a UAF use-after-free during device teardown. When the SOF audio driver fails to initialize e.g., due to a firmware boot timeout, its devices release the sndsofdev object that the mailbox client...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/vgem-fence: Fixed potential deadlock issues upon release. A timer that automatically releases a vgem fence after 10 seconds is now implemented. This is achieved by calling timerdeletesync from fence-ops.release, which is...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context. TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework after the respective DMA operations are completed...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: dmaengine: sh: rz-dmac – Move the interrupt request after everything is set up. Once an interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is only...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: comedi: pcl726 – Prevent invalid IRQ numbers. The reproducer passed in an IRQ number 0x80008000, which was too large, triggering the OOB Out-of-Bounds error. A check for the IRQ number was added to prevent users from entering an...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/ioapic: Handling allocation failures gracefully Breno observed panics when using failslab under certain conditions during runtime: - can not alloc irqpinlist -1,0,20 - Kernel panic – not syncing: IO-APIC: Failed to add irq-pi...

ROS-20260930-73-0017

The vulnerability of the interruptcntprobe function in the drivers/counter/interrupt-cnt.c module of the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

CVE-2026-76737

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...

CVE-2026-97929

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. This vulnerability can lead to information disclosure when communicating with an attached USB device. The driver fails to verify the length of incoming data transfers during interrupt handling, allowin...

CVE-2026-97503

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS or memory corruption due to a stack-based buffer overflow in the interrupt proc filesystem interface. When creating or removing directory entries for interrupt requests, the temporary buffer is too small ...

CVE-2026-97600

A flaw was found in the Linux kernel's CC2520 radio driver. During device removal, an interrupt handler can queue background work after the driver's private data has been released, resulting in a use-after-free condition. A local user with privileges to disconnect or unbind the device could explo...

CVE-2026-97502

A flaw was found in the Linux kernel's DaVinci MultiMediaCard MMC driver. When processing hardware interrupt events such as read timeouts or communication errors, the driver accesses a data pointer without verifying that an active transfer structure exists. A local user or abnormal device conditi...

CVE-2026-93830

A flaw was found in the Linux kernel's stmmac network driver. An attacker can cause a Denial of Service DoS by sending high volumes of network traffic to an affected system. Under heavy packet load, the network controller exhausts its receive buffers and continuously fires hardware interrupts...

CVE-2026-98035

A flaw was found in the Linux kernel's BPF subsystem. When updating or deleting elements in resizable hash tables, the kernel directly releases special object fields rather than safely deferring their cancellation, which is not safe when running in Non-Maskable Interrupt NMI context. A local user...

CVE-2026-97515

A flaw was found in the Linux kernel's I3C Improved Inter-Integrated Circuit master driver. On affected hardware, when a target device on the bus holds the data line low, the controller triggers an interrupt feedback loop during recovery attempts. This issue creates an interrupt storm that can...

AZL-104534 CVE-2026-97993 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: don't install the eventfdctxfdget error in configctx vhostvdpasetconfigcall swaps the eventfdctxfdget return value into v-configctx before checking it, so on failure the field briefly holds an ERRPTR: ctx = fd ==...

CVE-2026-97993

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: don't install the eventfdctxfdget error in configctx vhostvdpasetconfigcall swaps the eventfdctxfdget return value into v-configctx before checking it, so on failure the field briefly holds an ERRPTR: ctx = fd ==...