Linux Distros Unpatched Vulnerability : CVE-2026-74750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref and the existing release path frees the AEAD transforms from an RCU...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098993 advisory. In the Linux kernel, the following vulnerability has been resolved: smc: Use skdstget and dstdevrcu in in smcclcprfxset. smcclcprfxset is called during connect and n...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098967 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6selectpath under high next hop churn Soft lockups have been observe...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098976 advisory. In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlanforwardsource Add RCU protection on struct...

PT-2026-82120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the tcf action exec function when handling TC ACT GOTO CHAIN. The function performs an initial check of the a-goto chain...

Linux Distros Unpatched Vulnerability : CVE-2026-80519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-slot and peer references. The peer reference pins the netdev,...

ROS-20260825-73-0034

The vulnerability of the rcuirqenterchecktick function in the kernel/rcu/tree.c module of the synchronization subsystem in multi-threaded Linux kernel systems is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow an...

Linux Kernel RCE

The vulnerability of the cblistinitgeneric function in the kernel/rcu/tasks.h module of the Linux operating system is related to the use of blocking code in a single-threaded, non-blocking context. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: Use kfreercu for the off-channel link in mt76putvifPhyLink. The mt76putvifPhyLink function frees the off-channel mlink using the plain kfree function, after calling rcuassignpointerNULL. However, rcuassignpointer only...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dm: fixed a use-after-free in dmcleanupzoneddev dmcleanupzoneddev uses a queue, so it must be called before blkcleanupdisk starts its execution: blkcleanupdisk-blkcleanupqueue-kobjectput-blkreleasequeue-...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: BPF: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs there. Add support to the verifier to explicitly reject attempts to lo...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: tracing/userevents: The use-after-free issue in usereventmmdup has been fixed. In usereventmmdup, the function walks through the enabler list of the parent MM without locking the enabler list under rcureadlock. This causes a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm: limiting the target BIOS polling to a single iteration. dmpollbio is the -pollbio callback for a stacked DM device. The caller only has knowledge of the DM queue; therefore, it may decide to perform a spinning poll if it...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dma-buf: dma-fence: Fixed potential NULL pointer dereferencing issues. The commit mentioned in the fixes section introduced a mechanism through which fence producers can be fully decoupled from fence consumers. This desirable...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tcp: The task of freeing md5siginfo is delayed beyond the RCU grace period in tcpconnect. The reconciliation of md5 and ao in tcpconnect net/ipv4/tcpoutput.c has two symmetric branches: c if needsmd5 tcpaodestroysocksk, false; el...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fixed the incorrect RCU protection in rtspinunlock. rtspinunlock releases the RCU protection before unlocking the lock. This creates a potential for the following UAF Uninitialized Arbitrary Fault scenario: T1 T2...

SUSE CVE-2026-74630

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then unconditionally increments its refcount. Device teardown can clear the pointer and drop the last reference between these operations...

SUSE CVE-2026-74661

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon worker mac802154beaconworker reads local-beaconreq under RCU and derives the sub-interface from the request, but then drops the RCU read lock and continues to use both sdata and the...

AZL-97263 CVE-2026-74661 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon worker mac802154beaconworker reads local-beaconreq under RCU and derives the sub-interface from the request, but then drops the RCU read lock and continues to use both sdata and the...

CVE-2026-74661

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon worker mac802154beaconworker reads local-beaconreq under RCU and derives the sub-interface from the request, but then drops the RCU read lock and continues to use both sdata and the...