PT-2026-106613

In the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk-groups while lockless readers can use it netlink realloc groups uses krealloc under netlink table grab. Whenever NLGRPSZgroups lands in a different kmalloc bucket, the old bitmap is freed immediately. Two...

CVE-2026-98284: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk-groups while lockless readers can use it netlinkreallocgroups uses krealloc under netlinktablegrab. Whenever NLGRPSZgroups lands in a different kmalloc bucket, the old bitmap is freed immediately. Two...

PT-2026-106579

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXP PNFS in the netlink codepath The rework of how block layouts were checked moved the check for NFSEXP PNFS out of nfsd4 setup layout type and into the callers. That patch didn't account for the new cal...

CVE-2026-98301: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of sashiko's pre-existing bug reports. brmstsetstate calls switchdevportattrset for nonzero MSTIs while holding rcureadlock which invokes the blocking...

Linux Distros Unpatched Vulnerability : CVE-2026-98284

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netlink: do not free nlk-groups while lockless readers can use it netlinkreallocgroups uses krealloc under netlinktablegrab. Whenever NLGRPSZgroups lands in a...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fixed an illegal access to rmbdesc during SMC-D connection dumping. A crash was detected when dumping SMC-D connections. This issue can be reproduced by performing the following steps: 1. Run the nginx/wrk test: smcrun...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: fixed the integer overflow in the geneveopt structure’s length field. The struct geneveopt uses 5 bits to represent the length of each individual option. This means that the size of each option should be less than 128 bytes...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netlink: Fixed wraparounds of sk-skrmemalloc. Netlink has this pattern in some places: c if atomicread&sk-skrmemalloc sk-skrcvbuf atomicaddskb-truesize, &sk-skrmemalloc; This issue was also fixed in commit 5a465a0da13e “udp: Fixe...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tipc: Fixed the msg-req TLV len check in tipcnlcompatnametabledumpheader. This is a follow-up to commit 974cb0e3e7c9 “tipc: Fixed uninit-value in tipcnlcompatnametabledump“”, where a type cast from sizeof.. to int was required so...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netlink: Do not hard code the device address length in fdb dumps. syzbot reports that some netdev devices do not have a six-byte address. Replace ETHALEN with dev-addrlen. 1 In cases where dev-addrlen = 4 BUG: KMSAN:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: nl80211: Fix for “NL80211ATTRMLOLINKID off-by-one” issue. Since the validation of the netlink attribute range includes inclusive checking, the maximum value of the attribute NL80211ATTRMLOLINKID should be...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: hsr: The operation of freeing the node table is deferred until after the RCU readers have processed it. Generic-netlink operations for hsrnodelist and hsrnodestatus are executed under rcureadlock. These operations iterate...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfrm: Clearing trailing padding in buildpolexpire The buildexpire function clears the trailing padding bytes of the struct xfrmuserexpire after setting the u8 hard field using memsetafter. However, the analogous function...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: ipv6: sr – fixed possible use-after-free and nullptrderef issues. The pernet operations structure for the subsystem must be registered before registering the generic netlink family...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: sched: clsapi: The tcchainfillnode function was corrected by setting tcminfo to zero during initialization, thereby preventing information leakage. When building netlink messages, the tcchainfillnode function never initializ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fixed the issue where use-after-free occurred in ibqueryqp. When querying a QP via the netlink flow, the only synchronization mechanism for that QP is rdmarestrackget. However, during the QP destruction process,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netlink: Annotate lockless accesses to nlk-maxrecvmsglen. syzbot reported a data race in netlinkrecvmsg. Indeed, netlinkrecvmsg can be executed concurrently, and netlinkdump also requires protection. 1 Bug: KCSAN: Data race in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - net: genl: fixed a memory leak in the error path during policy dumping. - If the construction of the policy array fails when recording non-first policies, we need to unwind the process. - The netlinkpolicydumpaddpolicy...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netlink: Annotate accesses to nlk-cbrunning Both netlinkrecvmsg and netlinknativeseqshow read nlk-cbrunning without locking it. Use READONCE in those functions. Add corresponding WRITEONCE to netlinkdump and netlinkdumpstart...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: The error logic for writing back the IFLABRIDGEFLAGS flags has been fixed. In the commit d73ef2d69c0d “rtnetlink: let rtnlbridgesetlink checks IFLABRIDGEMODE length”, an adjustment was made to the old loop logic in the...