Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-pf: Fixed the use of GFPKERNEL in atomic contexts for rt. The commit 4af1b64f80fb “octeontx2-pf: Fixed the lmtst ID used in aurafree” uses get/putcpu to protect the usage of percpu pointers in the -aurafreeptr...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Avoid using GFPKERNEL in an atomic context. Using GFPKERNEL in a preemption-disabled context may cause the following warning when CONFIGDEBUGATOMICSLEEP is enabled. 32.542271 BUG: A sleeping function was called from...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Do not attempt to process FASTREQ or EVENT messages. Currently, VF/PF relay actions only use regular REQUEST messages. The PF should not attempt to handle FASTREQUEST or EVENT messages, as doing so would break the VFPF...

CVE-2026-72448

A flaw was found in the octeontx2-pf driver in the Linux kernel. When a network interface utilizing this driver is shut down or the device is removed, a memory leak occurs because the send-queue timestamp buffer is not properly deallocated. This continuous memory accumulation can lead to system...

CVE-2026-72023

A flaw was found in the Linux kernel's octeontx2-pf driver. During the initialization of hardware resources, a memory leak occurs where certain pointer arrays are not properly freed upon failure. This issue could lead to resource exhaustion, potentially resulting in a Denial of Service DoS for th...

SUSE CVE-2026-68133

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...

CVE-2026-72360

A flaw was found in the Linux kernel's drm/xe/pf component. The Physical Function PF incorrectly attempts to process FASTREQUEST or EVENT messages, which are not part of the defined Virtual Function to Physical Function VFPF Application Binary Interface ABI protocol. This misprocessing can lead t...

Linux Distros Unpatched Vulnerability : CVE-2026-72448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-pf: Fix leak of SQ timestamp buffer on teardown The send-queue timestamp ring is allocated with qmemalloc when timestamping is used, but otx2freesqres...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100157 advisory. In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel booting During a kexec reboot the hardware is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099709 advisory. In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100519 advisory. In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack...

CVE-2026-72448

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown The send-queue timestamp ring is allocated with qmemalloc when timestamping is used, but otx2freesqres never freed sq-timestamps, leaking that memory across ifdown and...

CVE-2026-72360

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FASTREQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FASTREQUEST nor EVENT messages as this would result in...

UBUNTU-CVE-2026-72448

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown The send-queue timestamp ring is allocated with qmemalloc when timestamping is used, but otx2freesqres never freed sq-timestamps, leaking that memory across ifdown and...

CVE-2026-72360

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FASTREQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FASTREQUEST nor EVENT messages as this would result in...

CVE-2026-72448

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown The send-queue timestamp ring is allocated with qmemalloc when timestamping is used, but otx2freesqres never freed sq-timestamps, leaking that memory across ifdown and...

UBUNTU-CVE-2026-72360

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FASTREQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FASTREQUEST nor EVENT messages as this would result in...

CVE-2026-72023

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure, errfreesqptrs only frees SQB pages, leaving the per-SQ sqbptrs arrays...

CVE-2026-72045

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read another function's LMTLINE physical base address and copy it into th...

CVE-2026-72023

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2inithwresources initializes SQ aura and pool resources before several later setup steps. On failure, errfreesqptrs only frees SQB pages, leaving the per-SQ sqbptrs arrays...