Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RISCV: Fixed an oops error caused by the irqsoff latency tracer. The tracehardirqson,off function requires the caller to properly set up the frame pointer. This is because these two functions use the macro ‘CALLERADDR1’ also...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-axi-dmac: ignore interrupt if no descriptor If the channel has no descriptor and the interrupt is raised, then the kernel will make a mistake. Check the result of vchannextdesc in the handler axichanblockxfercomplet...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fixed the issue with mlx5ibgethwstats when used for devices. Currently, when mlx5ibgethwstats is used for a device where portnum = 0, there is a special handling to ensure that the correct counters are used. However,...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Update uartdriverregistered upon driver removal The removal of the last MAX3100 device triggers the removal of the corresponding driver. However, the code does not update the respective global variable. After the...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1783362244)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783362244 advisory. - In the Linux kernel, the following vulnerability has been resolved: extcon: Modify extcon device to be created after driver data i...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1751916475)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1751916475 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: invoke MMU notifiers in shmem/file collapse pat...

kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released

A use-after-free vulnerability was identified in the Linux kernel framebuffer console fbcon subsystem. During framebuffer unregistration, the kernel freed the memory for a display mode but did not clear the corresponding fbdisplayi-mode pointer. Subsequent framebuffer ioctl operations could then...

DEBIAN-CVE-2026-97927

In the Linux kernel, the following vulnerability has been resolved: ufs: create the root dentry after loading cylinder metadata ufsfillsuper installed sb-sroot before it loaded the cylinder group structures for a writable mount: sb-sroot = dmakerootinode; ... if !sbrdonlysb if...

UBUNTU-CVE-2026-97927

In the Linux kernel, the following vulnerability has been resolved: ufs: create the root dentry after loading cylinder metadata ufsfillsuper installed sb-sroot before it loaded the cylinder group structures for a writable mount: sb-sroot = dmakerootinode; ... if !sbrdonlysb if...

kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released

A use-after-free vulnerability was identified in the Linux kernel framebuffer console fbcon subsystem. During framebuffer unregistration, the kernel freed the memory for a display mode but did not clear the corresponding fbdisplayi-mode pointer. Subsequent framebuffer ioctl operations could then...

PT-2026-98671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the macb network driver when the device tree describes a fixed-link without an "mdio" child node. In this scenario, the macb mii init function return...

SUSE CVE-2026-97507

In the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dmaalloccoherent The return value of dm1105dmamap, which handles DMA memory allocation, is ignored in dm1105hwinit. If dmaalloccoherent fails, the driver will proceed using a NULL pointe...

CVE-2026-97516

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Add NULL check for chip-edccath in rtwfwadaptivityresult It was recently reported that rtwfwadaptivityresult in fw.c dereferences rtwdev-chip-edccath without a NULL check. The issue is that devices with the 8821CE ch...

DEBIAN-CVE-2026-97507

In the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dmaalloccoherent The return value of dm1105dmamap, which handles DMA memory allocation, is ignored in dm1105hwinit. If dmaalloccoherent fails, the driver will proceed using a NULL pointe...

CVE-2026-97507

In the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dmaalloccoherent The return value of dm1105dmamap, which handles DMA memory allocation, is ignored in dm1105hwinit. If dmaalloccoherent fails, the driver will proceed using a NULL pointe...

AZL-103565 CVE-2026-97507 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dmaalloccoherent The return value of dm1105dmamap, which handles DMA memory allocation, is ignored in dm1105hwinit. If dmaalloccoherent fails, the driver will proceed using a NULL pointe...

UBUNTU-CVE-2026-97507

In the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dmaalloccoherent The return value of dm1105dmamap, which handles DMA memory allocation, is ignored in dm1105hwinit. If dmaalloccoherent fails, the driver will proceed using a NULL pointe...

UBUNTU-CVE-2026-97516

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Add NULL check for chip-edccath in rtwfwadaptivityresult It was recently reported that rtwfwadaptivityresult in fw.c dereferences rtwdev-chip-edccath without a NULL check. The issue is that devices with the 8821CE ch...

kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released

A use-after-free vulnerability was identified in the Linux kernel framebuffer console fbcon subsystem. During framebuffer unregistration, the kernel freed the memory for a display mode but did not clear the corresponding fbdisplayi-mode pointer. Subsequent framebuffer ioctl operations could then...

CVE-2026-97516

The Linux kernel 's rtw88 driver contains a vulnerability where the rtw_fw_adaptivity_result() function in fw.c dereferences rtwdev->chip->edcca_th without a NULL check . This specific issue affects devices using the 8821CE chip , as these devices do not define edcca_th in their chip inform...