Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netlink: Fixed wraparounds of sk-skrmemalloc. Netlink has this pattern in some places: c if atomicread&sk-skrmemalloc sk-skrcvbuf atomicaddskb-truesize, &sk-skrmemalloc; This issue was also fixed in commit 5a465a0da13e “udp: Fixe...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: sched: clsapi: The tcchainfillnode function was corrected by setting tcminfo to zero during initialization, thereby preventing information leakage. When building netlink messages, the tcchainfillnode function never initializ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: hsr: The operation of freeing the node table is deferred until after the RCU readers have processed it. Generic-netlink operations for hsrnodelist and hsrnodestatus are executed under rcureadlock. These operations iterate...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nfc: fixed a segfault in nfcgenldumpdevicesdone When kmalloc in nfcgenldumpdevices fails, nfcgenldumpdevicesdone causes a segfault as follows: KASAN: null-ptr-deref in range 0x0000000000000008-0x000000000000000f CPU: 0 PID: 25...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Fixed legacy IPoIB issues due to an incorrect number of queues. The referenced commit creates child PKEY interfaces through netlink, which involve multiple TX and RX queues. However, some devices do not support more tha...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: rtnetlink: Allocate sufficient vfinfo size for VF GUIDs when supported. Commit 30aad41721e0 "net/core: Add support for getting VF GUIDs" added support for obtaining VF port and node GUIDs in netlink’s ifinfo messages. However,...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: tipc: Changed the nlapolicy for bearer-related names to NLANULSTRING. The syzbot reported the following uninit-value access issues 1: ===================================================== BUG: KMSAN: uninit-value in strlen...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Use two-phase skb reclamation in ieee80211dostop Since 'devqueuexmit' should be called with interrupts enabled, the following backtrace is shown: ieee80211dostop … spinlockirqsave&local-queuestopreasonlock, flags ...

CVE-2026-97958

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by sending repeated netlink queries to inspect network traffic control chains without reading the responses. When the socket buffer fills, the kernel incorrectly retries the operation in an unbounded loop. This...

SUSE CVE-2026-97419

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

SUSE CVE-2026-97958

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Don't replay RTMGETCHAIN in tcctlchain. If a netlink socket sends RTMGETCHAIN requests repeatedly without recving the responses, tcctlchain hogs CPU and triggers Hung Task splat. 0 As caught in the stack trace,...

CVE-2026-97901

A flaw was found in the Linux kernel's Generic Netlink genetlink component. This flaw allows a local user to cause a Denial of Service DoS through a system crash. The vulnerability occurs because the kernel fails to maintain a reference to the target module during a policy dump that spans multipl...

CVE-2026-97608

A flaw was found in the Linux kernel's netfilter subsystem. A race condition occurs when network namespace operations are torn down before global logging backends are unregistered. A local user can exploit this timing window through sysctl or netlink interfaces to rebind a logger while it is bein...

CVE-2026-97419

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR subsystem. When ring error or node down events occur, asynchronous netlink notifications are broadcast exclusively to the root network namespace rather than the device's specific network namespace. This issue allows ...

AZL-104346 CVE-2026-98021 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...

CVE-2026-97901

In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump The generic netlink controller's policy dump keeps pointers to the target family's operation and policy tables in its callback state. A dump may be split across multiple skbs and...

CVE-2026-98021

The Linux kernel contains a vulnerability where rtnl_create_link() assigns IFLA_TXQLEN directly to dev->tx_queue_len without proper validation. This allows a device created with an oversized txqueuelen (e.g., 500000) to bypass the S16_MAX cap, leading to oversized ring allocations in pfifo_fas...

EUVD-2026-86674

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...

CVE-2026-98021

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...

EUVD-2026-86812

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Don't replay RTMGETCHAIN in tcctlchain. If a netlink socket sends RTMGETCHAIN requests repeatedly without recving the responses, tcctlchain hogs CPU and triggers Hung Task splat. 0 As caught in the stack trace,...