Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive semaphore deadlock in fiemap call syzbot detected a OCFS2 hang due to a recursive semaphore on a FSIOCFIEMAP of the extent list on a specially crafted mmap file. contextswitch kernel/sched/core.c:5357 inline...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: A double-free operation was corrected in userclusterconnect. userclusterdisconnect frees "conn-ccprivate", which is actually "lc". However, the error handling frees "lc" again. Setting "lc" to NULL in this case can prevent...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed idx validation in i40evalidatequeuemap. Ensured that the idx value is within the range of active/initialized TC’s when iterating over vf-chidx in i40evalidatequeuemap...

CVE-2025-68742 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68742 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2026-22980 affecting package kernel for versions less than 6.6.121.1-1

CVE-2026-22980 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68363 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68363 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-40149 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-40149 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2024-57982 affecting package kernel for versions less than 6.6.121.1-1

CVE-2024-57982 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2024-57795 affecting package kernel for versions less than 6.6.121.1-1

CVE-2024-57795 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: The WARNON message in nouveaufencecontextkill has been fixed. Nouveau is designed in such a way that it is expected that fences are only signaled through nouveaufencesignal. However, at least in one other place,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: A NULL pointer check was added in exynoschipidprobe. socdevattr-revision can be NULL; therefore, a pointer check was added to prevent potential NULL pointer dereferencing. This is similar to the fix i...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check the device memory pointer before using it. Add a NULL check before accessing device memory to prevent a crash if the dev-dm allocation in mlx5initonce fails...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003742 advisory. Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001294 advisory. In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001285 advisory. The vhcihcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004012 advisory. An issue was discovered in slcbump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized canframe data,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004328 advisory. An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001116 advisory. An integer overflow flaw was found in the Linux kernel's createelftables function. An unprivileged local user with access to SUID or otherwise privileged binary coul...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001335 advisory. A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001421)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001421 advisory. A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A...