Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: tipc: Wait and exit until all work queues are completed On some hosts, a crash could occur simply by repeating these commands several times: bash modprobe tipc tipc bearer enable media udp name UDP1 localip 127.0.0.1 rmmod tipc T...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: Features are now recalculated after XDP is disabled, fixing the issue of null dereferencing. Features are recalculated when XDP is disabled. Before: bash ip li set dev eth0 xdp obj xdpdummy.bpf.o sec xdp ip li set dev...

Astra Linux – Vulnerability in Linux

A buffer overflow attack in fbcon in the Linux kernel before version 5.9.7 could be exploited by local attackers to read privileged information or potentially cause the kernel to crash. This issue is identified as CID-3c4e0dff2095. This vulnerability arises because the KDFONTOPCOPY function in...

kernel: gfs2: Fix unlikely race in gdlm_put_lock

A flaw was found in the Linux kernel’s Global File System 2 implementation affecting distributed lock manager DLM handling in the gdlmputlock function. During an unmount operation, if the DFLUNMOUNT flag is set but the lockspace has not yet been fully released, remote callbacks gdlmast or gdlmbas...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS8.5:CLSA-2026:1784274653)

"The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1784274653 advisory. - In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlancommonnewlink valis provided a...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1749480611)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1749480611 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed Aft...

CVE-2026-100073

A flaw was found in the Linux kernel's ext4 file system. When saving modified memory pages back to storage, the system underestimates the journal transaction space required to split and update file block mappings. A local user could exploit this flaw by performing specific write operations,...

CVE-2026-100075

A flaw was found in the Linux kernel's SCSI Remote Direct Memory Access Protocol SRP target driver. When memory allocation fails while processing multi-buffer descriptors, the error-handling routine fails to reset internal tracking counters and leaves an invalid memory pointer. A remote client...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

CVE-2026-97986

A flaw was found in the Linux kernel's virtioinput driver. A race condition during device removal can lead to a Denial of Service DoS via a kernel crash. Because the driver unregisters the input device before resetting the underlying virtual device, in-flight event callbacks may access freed devi...

CVE-2026-97978

A flaw was found in the Linux kernel's Intel Ethernet driver ice. Event tracing routines dereferenced internal data pointers when formatting log messages instead of capturing the necessary values when the event was recorded. A local user with administrative access or tracing privileges could...

CVE-2026-97942

A flaw was found in the Linux kernel's x86 instruction patching subsystem. A race condition between runtime instruction modification text poking and page attribute updates can cause virtual memory lookup failures in shared executable memory. A local user can trigger this issue during kernel modul...

CVE-2026-97489

A flaw was found in the Linux kernel's BFS Boot File System implementation. The kernel fails to properly verify the return value when setting the block size during a mount operation. A local user with permissions to mount file systems could exploit this issue by mounting an incompatible file syst...

CVE-2026-97927

A flaw was found in the Linux kernel's Unix File System UFS implementation. This vulnerability allows a local user to cause a Denial of Service DoS by mounting a specially crafted or corrupted file system image. During a failed mount operation, an improper cleanup sequence leads to a null pointer...

CVE-2026-97925

A flaw was found in the Linux kernel's timer tick broadcast subsystem. A race condition occurs when installing a replacement clock event device concurrently with ongoing tick broadcast operations, causing the system to attempt to arm a detached timer device. If the central processing unit CPU...

CVE-2026-97916

A flaw was found in the Linux kernel's Intel VPU ivpu driver. A compromised device firmware can cause a Denial of Service DoS by modifying log buffer metadata in shared memory. Because the host driver re-reads buffer size fields from shared memory after validating them, the firmware can alter the...

CVE-2026-97601

A flaw was found in the Linux kernel's 6LoWPAN IPv6 over Low-Power Wireless Personal Area Networks networking subsystem, which can lead to a Denial of Service DoS. When a network device changes its link type without properly initializing internal data pointers, the kernel fails to validate the...

CVE-2026-97424

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. A local user could cause a Denial of Service DoS by triggering a system suspend followed by unloading the driver. Due to missing suspend handling and improper cleanup logic in the Reliability, Availability, and Serviceability RAS...

CVE-2026-97603

A flaw was found in the Linux kernel's idpf network driver. This flaw allows a local user with administrative privileges to cause a Denial of Service DoS through a kernel crash. The issue occurs because dynamic interrupt moderation DIM background tasks are not disabled before releasing queue vect...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...