Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - media: cx25821: Fixed a resource leak in cx25821devsetup - Added releasememregion if ioremap fails to release the memory region obtained by cx25821getresources...

CVE-2026-83677

A memory leak vulnerability (CWE-401) exists in the Windows DHCP Client due to a missing release of memory after its effective lifetime. This flaw allows an unauthorized attacker to conduct a denial of service (DoS) attack over a network. The CVSS v3.1 score is 7.5 (High) , indicating low attack ...

ROS-20261013-73-0065

The vulnerability in the drivers/s390/cio/css.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261013-73-0040

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0051

The vulnerability of the authgss.c component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0043

The vulnerability of the au1200fb.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Quarkiverse Hub Quarkus LangChain4j Resource Management Error Vulnerability

The Quarkiverse Hub for Quarkus LangChain4j versions 1.9.0 to 1.14.1 has a resource management vulnerability. This vulnerability stems from a memory release deficiency in the chat-scopes WebSocket /chat/routes endpoint. Attackers send repeated CONNECT frames using the same chatId, causing isolate...

ROS-20261009-73-0416

The vulnerability of the DRM/Atmel-HLCDC components in the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0296

The vulnerability of the drivers/media/pci/cx25821/cx25821-core.c component of the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0277

The vulnerability in the drivers/net/ethernet/marvell/octeontx2/af/cgx.c component of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261009-73-0400

The vulnerability of the gfs2 component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0352

The vulnerability of the drivers/staging/rtl8723bs/osdep/ioctlcfg80211.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261009-73-0340

The vulnerability of the drivers/media/i2c/tw9903.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0359

The vulnerability in the drivers/media/radio/radio-keene.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0210

The vulnerability in the drivers/remoteproc/imxrproc.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0076

The vulnerability of the mtk-smi component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0372

The vulnerability of the k3-socinfo component in the Linux operating system’s kernel is related to improper memory release before deleting the last pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0346

The vulnerability of the drivers/media/usb/pvrusb2/pvrusb2-hdw.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Office Code Execution

The vulnerability of the Microsoft Office software suite on Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-111244

Уязвимость функции MPLS Operation, Administration, and Maintenance OAM операционной системы Cisco NX-OS сетевых устройств Cisco Nexus 3000 Series Switches и Cisco Nexus 9000 Series связана с освобождением ранее не выделенной памяти. Эксплуатация уязвимости может позволить нарушителю, действующему...