Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142468 advisory. In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143039)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143039 advisory. In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field,...

CLSA-2026-1792249415 kernel-uek: Fix of 17 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - nbd: defer config unlock in nbdgenlconnect CVE-2025-68366 - nvdimm: virtiopmem: refcount requests for token lifetime CVE-2026-93196 - tracing: Set the trace clock before registering the histogram trigger CVE-2026-97935 -...

CVE-2026-89965

A flaw was found in the Linux kernel's nvdimm/btt component. This vulnerability arises from insufficient validation of the nfree field in the BTT info block, which is read from the storage medium. A specially crafted or foreign arena with an nfree value below the expected lane count can cause an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path The memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some cases where discoverarenas encounters an error. This leads to memor...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handling preemption in BTT lane acquisition BTT lanes serialize access to per-lane metadata and workspace state during BTT I/O. The btt-check unit test reports data mismatches during BTT writes due to a race in lane...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: rejecting an arena whose nfree value is lower than the number of lanes. The nfree field in the BTT info block, which represents the number of reserved free blocks, is read from the medium without validation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: acpi: nfit: fixed the narrowing conversion in acpinfitctl Syzkaller reported a warning in tonfitbusuuid: “Only secondary bus families can be translated”. This warning is emitted if the argument equals NVDIMMBUSFAMILYNFIT == 0...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Arenas allocated by discoverarenas or createarenas are not freed on some error paths during bttinit. This leads to memory leakage when BTT initialization fails. Free arenas are called using freearenas from the affecte...

Ubuntu 24.04 LTS : Linux kernel (NVIDIA Tegra) vulnerabilities (USN-8886-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8886-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

USN-8887-3: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8887-1 linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8886-1: Linux kernel (NVIDIA Tegra) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVDIMM Non-Volatile Memory Device drivers; - Handshake API; - ARM32 architecture; - ARM64 architecture; - MIPS...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvdimm: Fixed scenarios where firmware activation led to deadlocks. Lockdep reports the following deadlock scenarios for CXL root devices: - power-management, deviceprepare, operations, and deviceshutdown operations for...

SUSE CVE-2026-98161

In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmemsubmitbio records a REQPREFLUSH error, but continues to copy the bio data and can later overwrite the error with a successful REQFUA flush. That lets data writes run after a fail...

AZL-104201 CVE-2026-98161 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmemsubmitbio records a REQPREFLUSH error, but continues to copy the bio data and can later overwrite the error with a successful REQFUA flush. That lets data writes run after a fail...

DEBIAN-CVE-2026-98161

In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmemsubmitbio records a REQPREFLUSH error, but continues to copy the bio data and can later overwrite the error with a successful REQFUA flush. That lets data writes run after a fail...

CVE-2026-98161

In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmemsubmitbio records a REQPREFLUSH error, but continues to copy the bio data and can later overwrite the error with a successful REQFUA flush. That lets data writes run after a fail...

UBUNTU-CVE-2026-98161

In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmemsubmitbio records a REQPREFLUSH error, but continues to copy the bio data and can later overwrite the error with a successful REQFUA flush. That lets data writes run after a fail...

CVE-2026-98161 nvdimm: pmem: keep PREFLUSH before data writes

In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmemsubmitbio records a REQPREFLUSH error, but continues to copy the bio data and can later overwrite the error with a successful REQFUA flush. That lets data writes run after a fail...