976 matches found
Astra Linux – Vulnerability in gst-plugins-good1.0
DOS: Potential heap overwrite during MKV demuxing using Zlib decompression. Integer overflow occurs in the matroskademux element within the gstmatroskadecompressdata function, which can cause a segfault—or potentially a heap overwrite, depending on the libc and operating system. Depending on the...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Maps shared memory as WC, not WB. Linux does not write to the cmd-db region. This memory region is protected from writing by XPU. XPU may sometimes falsely detect a clean cache eviction as a “write” to the...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: mm/pagetablecheck: A crash occurred when checking ZONEDEVICE. Not all pages apply to the pgtable check. An example is ZONEDEVICE pages: they directly map PFNs, and they never allocate pageext, even if there’s a struct page around...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/i915/gem: Fixed the calculation of the boundaries of virtual memory mappings. The current approach calculates the size of the mapped area as the smaller value between the requested size and the actual size, without...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ACPI: Tables: FPDT: Do not call acpiosmapmemory on an invalid physical address. On a Packard Bell Dot SC Intel Atom N2600 model, there is an FPDT table containing invalid physical addresses, with high bits set that fall outside t...
Linux kernel vmclock_miscdev_mmap Heap Buffer Overflow DoS
The vulnerability of the vmclockmiscdevmmap function in the drivers/ptp/ptpvmclock.c file of Linux kernel operating systems is related to incorrect execution permissions. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protect...
PT-2026-83024
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vmclock miscdev mmap function within the drivers/ptp/ptp vmclock.c file. This flaw allows read-only mappings to become writable, which may impact the...
CVE-2026-80582
A flaw was found in the Linux kernel's drm/shmemhelper component. This vulnerability arises from insufficient boundary checks when handling large memory pages. An attacker could potentially trigger an attempt to map memory outside its designated area. This improper memory handling could lead to a...
CVE-2026-74641
A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fixed page mapping when vmareaallocpages uses high-order fallback to order 0. The vmappagesrangenoflush function assumes that its argument pages contains pages with the same page shift. However, since commit...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: x86/ioremap: Maps EFI-reserved memory as encrypted for SEV. Some drivers require memory that is marked as EFI boot services data. To prevent this memory from being reused by the kernel after ExitBootServices, efimemreserve is use...
CVE-2026-72496
A flaw was found in the Linux kernel's RDMA/bnxtre component. When the bnxtqpliballocdpi function attempts to map I/O memory ioremap, it may not properly handle failures. This oversight could lead to system instability or a denial of service DoS condition, as the system might proceed with an...
Linux Distros Unpatched Vulnerability : CVE-2026-74380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpu: host1x: Fix iommumapsgtable return value check Commit iommu: return full error code from iommumapsgatomic changed iommumapsgtable to return an ssizet and...
CVE-2026-72305
A flaw was found in VDUSE in the Linux kernel. This vulnerability allows a local user to disclose sensitive kernel information. By mapping non-page-aligned bounce pages to userspace, an attacker can access kernel memory that should not be exposed, leading to an information disclosure. Mitigation...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100723)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100723 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: use kmaplocalpage in netvsccopytosendbuf netvsccopytosendbuf copies page buffer entrie...
PT-2026-72816
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gpu: host1x component where the pin job function incorrectly handles the return value of iommu map sgtable. Due to a change where iommu map sgtable now returns an...
SUSE CVE-2026-68260
In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find operation against map operation, and the driver needs to ensure a map operation shouldn't happen when a find operation is...
CVE-2026-68445 drm/vc4: Prevent shader BO mappings from becoming writable
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4gemobjectmmap rejects a writable mapping of a validated shader BO, but leaves VMMAYWRITE set. Userspace can map the BO read-only and then turn it writable with mprotec...
Linux Distros Unpatched Vulnerability : CVE-2026-68260
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn...
