Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: fs: export anoninodemakesecureinode and fix the issue with secretmem LSM bypass. The anoninodemakesecureinode function was exported to allow KVM guestmemfd to create anonymous inodes with proper security context. This replaces...

SUSE CVE-2026-89959

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix control domain removal in vfioapmdevcfgremove The vfioapconfigremove function uses the bitmapandnot function to clear bits from the matrixmdev-matrix.adm bitmap specifies the control domains assigned to the mdev...

DEBIAN-CVE-2026-89959

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix control domain removal in vfioapmdevcfgremove The vfioapconfigremove function uses the bitmapandnot function to clear bits from the matrixmdev-matrix.adm bitmap specifies the control domains assigned to the mdev...

AZL-101180 CVE-2026-89959 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix control domain removal in vfioapmdevcfgremove The vfioapconfigremove function uses the bitmapandnot function to clear bits from the matrixmdev-matrix.adm bitmap specifies the control domains assigned to the mdev...

CVE-2026-89959

CVE-2026-89959 is a Linux kernel vulnerability in the s390/vfio-ap subsystem. The vfio_ap_config_remove function incorrectly used bitmap_andnot instead of bitmap_and when clearing bits from the matrix_mdev->matrix.adm bitmap (which tracks control domains assigned to a mediated device). This pr...

CVE-2026-64283

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...

MiracleLinux 7 : kernel-3.10.0-1062.el7 (AXSA:2019-4338:05)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4338:05 advisory. Kernel: vhostnet: infinite loop while receiving packets leads to DoS CVE-2019-3900 Kernel: page cache side channel attacks CVE-2019-5489 kernel:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002630 advisory. The accesspmuevcntr function in arch/arm64/kvm/sysregs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service assertio...

CVE-2023-54241

CVE-2023-54241 (Linux kernel, MIPS/KVM) : Triggered by a NULL pointer dereference when creating a KVM guest, after the commit that removed KVM_TE support. The root cause is the deletion of kvm_mips_commpage_init(), which leaves vcpu->arch.cop0 NULL. The fix implemented is to make cop0 point to...

EUVD-2022-54670

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use trycmpxchguser to update guest PTE A/D bits Use the recently introduced trycmpxchguser to update guest PTE A/D bits instead of mapping the PTE into kernel address space. The VMPFNMAP path is broken as it assumes tha...

EUVD-2014-7977

Malware in sbrugna...

EUVD-2012-2121

Malware in sbrugna...

EUVD-2015-2055

Malware in sbrugna...

EUVD-2017-17069

Malware in sbrugna...

EUVD-2017-11772

Malware in sbrugna...

EUVD-2021-16131

Malware in sbrugna...

EUVD-2013-0329

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987266 advisory. In the Linux kernel, the following vulnerability has been resolved: kvm: avoid speculation-based attacks from out-of-range memslot accesses KVM's mechanism for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414525 advisory. An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the host, when the host is running on Power8, due to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414567)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414567 advisory. arch/powerpc/kvm/book3srtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via...