Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netsched: ets: fix a race in etsqdiscchange Gerrard Tai reported a race condition in ETS, whenever the SFQ perturb timer fires at the wrong time. The race sequence is as follows: CPU 0 CPU 1 1: lock root 2: qdisctreeFlushBacklog ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/smc: fixed an issue where a NULL pointer was dereferenced in smcibissgneedsync BUG: NULL pointer dereferencing in the kernel, address: 00000000000002ec PGD 0 P4D 0 Oops: 0000 1 SMP PTI CPU: 28 UID: 0 PID: 343 Comm: kworker/28...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: libwx: removed the duplicate function pagepoolputfullpage The pagepoolputfullpage function should only be called when freeing Rx buffers or creating an skb if the size is too short. At other times, the pages need to be reuse...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fixed the recursive rtnllock call during the probe function. The deadlock occurs in a stack trace similar to this: virtnetprobe rtnllock virtioconfigChangedWork netdevNotifyPeers rtnllock This issue occurs when the VM...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/packet: a race condition in packetsetring and packetnotifier has been fixed. When packetsetring releases po-bindlock, another thread may execute packetnotifier and process an NETDEVUP event. This race condition is similar to...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against devlec changes. It appears that there were calls to devput without prior calls to devhold, leading to imbalance and UAF Use-After-Fault errors...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netsched: genestimator: fix esttimer vs CONFIGPREEMPTRT=y The syzbot reported a warning in esttimer 1. The problem arises from the fact that when CONFIGPREEMPTRT=y is enabled, timer callbacks can be preempted...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: xfrm: The interface function xfrmichangelink may incorrectly place the special interface xi in the xfrminet-xfrmi hash. This issue occurs because the check to enforce this behavior is only performed in cases where the xi value is...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/sched: Abort tcmodifyqdisc if parent class does not exist Lion’s patch 1 uncovered an ancient bug in the qdisc API. Whenever a user creates or modifies a qdisc with another qdisc as its parent, the qdisc API will detect that...

[SECURITY] Fedora 43 Update: unbound-1.24.1-1.fc43

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...

CVE-2025-58152

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication...

CVE-2025-58152

The CVE-2025-58152 entry concerns Century Systems FutureNet MA and IP-K series devices. According to connected sources, the vulnerability involves exposing firmware version and garbage collection information on an internal web page, which can be accessed via crafted HTTP requests without authenti...

Excessive CPU consumption in Reader.ReadResponse in net/textproto

...

Lack of limit when parsing cookies can cause memory exhaustion in net/http

...

Excessive CPU consumption in ParseAddress in net/mail

...

The vulnerability of the `net_process_received_packet` function in the `net/net.c` component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the netprocessreceivedpacket function in the net/net.c component of the U-Boot loader is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the nfs_readreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the netdev_alloc_skb_ipalign() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the netdevallocskbipalign function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a service failure...

USN-7853-2: Linux kernel (FIPS) vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7854-1 linux-kvm vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...