Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pin Assignments A poorly implemented DisplayPort Alt Mode port implementation may indicate that its pin assignment capabilities exceed the maximum value, DPPINASSIGNF. In thi...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu: fixed the gart.bo pincount leak. gmcv9,100gartdisable is not called when there’s no corresponding gartenable function in the SRIOV case. This will lead to a gart.bo pincount leak when the driver is unloaded...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: gpio: wcd934x – Fixed the out-of-bounds shift error. The bit mask for pins 0 to 4 is actually BIT0 to BIT4, but we ended up using BITn – 1, which is incorrect. This issue was caught by the UBSAN check. UBSAN: Out-of-bounds shi...

Astra Linux – Vulnerability in opensc

A flaw was discovered in OpenSC packages that could allow for a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length PIN is passed. This issue poses a security risk, especially for OS...

SUSE CVE-2026-68234

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix bo-pin leaking in amdgpubocreatereserved amdgpubocreatereserved only allocates a new BO when boptr struct amdgpubo boptr as input parameter is NULL, it simply skips creation when boptr is non-NULL. But it...

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

Cybersecurity researchers have shed light on an updated version of ToxicPanda aka TgToxic that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally. Zimperium zLabs, in a Wednesday report, said the Android malware also features...

Linux Distros Unpatched Vulnerability : CVE-2026-68465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: sdhci-esdhc-imx: fix esdhcchangepinstate to allow default state restore esdhcchangepinstate checks for pins100mhz and pins200mhz at the top of the function...

Linux Distros Unpatched Vulnerability : CVE-2026-72414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the...

UBUNTU-CVE-2026-72414

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-68465

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhcchangepinstate to allow default state restore esdhcchangepinstate checks for pins100mhz and pins200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents the...

CVE-2026-68465

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhcchangepinstate to allow default state restore esdhcchangepinstate checks for pins100mhz and pins200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents the...

UBUNTU-CVE-2026-68465

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhcchangepinstate to allow default state restore esdhcchangepinstate checks for pins100mhz and pins200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents the...

CVE-2026-74423

The CVE-2026-74423 issue is in the Linux kernel, specifically accel/amdxdna: there is a leak when pin_user_pages_fast() pins fewer pages than requested. The pages that were successfully pinned are not released on failure. The documented fix unpins any partially pinned pages before returning failu...

EUVD-2026-59313

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-68465

The CVE concerns the Linux kernel MMC subsystem (sdhci-esdhc-imx). The root cause was esdhc_change_pinstate() evaluating pins_100mhz/pins_200mhz at the top and returning -EINVAL if either is undefined, which could prevent the default pin configuration from being restored for devices with a sleep ...

EUVD-2026-59087

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhcchangepinstate to allow default state restore esdhcchangepinstate checks for pins100mhz and pins200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents the...

CVE-2026-68465 mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhcchangepinstate to allow default state restore esdhcchangepinstate checks for pins100mhz and pins200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents the...

CVE-2026-19847: Stack-based Buffer Overflow

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The...

Security Bulletin:Vulnerability in GnuTLS affects IBM Netezza Appliance

Summary The GnuTLS package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-42014 Vulnerability Details CVEID:CVE-2026-42014 DESCRIPTION: A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN,...