Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: validate topology volume range before allocation SOF treats the topology mixer min and max values as non-negative indices into its volume table. It stores them in signed fields, allocates max + 1 entries via an int...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference MLX5IBMETHODDEVXSUBSCRIBEEVENT links eventsub into sublist before initializing the fields used by the shared error path. If eventfdctxfdget then fails, the unwind path...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtwcfg80211setwpaie supplicantie is a 256-byte array in struct securitypriv. The WPA and WPA2 IE copy paths use: memcpypadapter-securitypriv.supplicantie, &pwpa0, wpaielen + 2; wher...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: fix UAF when probe runs concurrently with dyn ID removal Dynamic IDs are only guaranteed to be valid when usbdynidslock is held, as removeidstore can free the node. Therefore, create a copy in usbprobeinterface. Clarify the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending keyuptimer in remove appleirremove runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input device via hiddisconnect - hidinputdisconnect - inputunregisterdevice,...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative optlen in cgroup getsockopt hook A cgroup getsockopt BPF program can shrink ctx-optlen after the kernel getsockopt handler has run. The kernel-buffer variant, used by TCPZEROCOPYRECEIVE, only rejects values...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Clear affinity hint before calling ath11kpcicfreeirq in error path If a shared IRQ is used by the driver due to platform limitations, then the IRQ affinity hint is set right after the allocation of IRQ vectors in...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a struct displayidtiledblock and reads the full fixed layout up to tile-topologyid7 without checking block-numbytes. The DisplayID...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001requestmsix unwinds previously registered handlers using freeirq when requestirq fails. In the rollback loop, it uses the failing index i instead of the already...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: keys: fix out-of-bounds read in keyringgetkeychunk For description-level chunks, keyringgetkeychunk advances the read pointer by level sizeoflong past the inline prefix but only bounds-checks the prefix. As a result, a sufficient...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: pci: dm1105: Free allocated workqueue Destroy the allocated workqueue within the remove callback to release its resources, thereby fixing the memory leak...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: avoid userspace overflow on invalid optlen nfcllcpgetsockopt casts optval to u32 user for putuser, so the kernel always stores 4 bytes regardless of the caller-supplied optlen. The existing mintu32, len, sizeofu32 only...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Bonding: Fix devconfall NULL dereference when IPv6 is disabled When booting with the ‘ipv6.disable=1’ parameter, devconfall is never initialized because inet6init exits before addrconfinit is called, which initializes it. However...

CVE-2026-99189

A flaw was found in the Linux kernel's General-Purpose Input/Output GPIO MXC driver. This vulnerability can result in a Denial of Service DoS through a system crash if an interrupt arrives while the device is initializing. Because the interrupt handler is registered before its required data...

CVE-2026-99186

A flaw was found in the Linux kernel's x86 instruction evaluation component. A local user can exploit this vulnerability to cause a Denial of Service DoS by executing instructions with segment register overrides that trigger an infinite loop during instruction decoding. This condition traps the...

Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-64217: netfs: Fix overrun check in netfsextractuseriter bsc1272874. CVE-2026-68426:...

SUSE-SU-2026:5020-1 Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-64217: netfs: Fix overrun check in netfsextractuseriter bsc1272874. -...

SUSE-SU-2026:5019-1 Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

Exploit for CVE-2026-98432

CVE-2026-98432 - Linux Kernel IPv4 TCP Use-After-Free Vulnerab...

CVE-2026-99202

A flaw was found in the Linux kernel's libsas subsystem, leading to a denial of service DoS. When resuming a host adapter connected to an expander-attached storage drive, an internal deadlock condition can occur while executing management commands. A local user can trigger this vulnerability duri...