Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed an oops due to the absence of the prealloc backlog struct. If an AFRXRPC service socket is opened and bound, but the calls are pre-allocated, then rxrpcallocincomingcall will cause an oops because the rxrpcbacklog...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rxrpc: The removal of calls from the rxnet-calls list was corrected to use listdelrcu instead of listdelinit, to prevent potential infinite loops due to improper handling of the proc.net/rxrpc/calls structure. However, this means...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: afs: Fixed the callback service message parsers to pass through -EAGAIN. The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the...

ROS-20260930-73-0074

The vulnerability of the rxrpcrecvmsg function in the net/rxrpc/recvmsg.c module, which supports RxRPC session sockets in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the rxkad_verify_response() function in the net/rxrpc/rxkad.c module allows a hacker to cause a service failure within the RxRPC session support of the Linux operating system’s kernel.

The vulnerability of the rxkadverifyresponse function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow a remote...

The vulnerability of the rxgk_extract_token() function in the net/rxrpc/rxgk_app.c module, which is part of the RxRPC session support for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxgkextracttoken function in the net/rxrpc/rxgkapp.c module, which is part of the RxRPC session support for the Linux operating system’s kernel, stems from an improper check on the returned value by this function. Exploiting this vulnerability could allow a remote attacke...

The vulnerability of the `rxkad_verify_packet_2()` function in the `net/rxrpc/rxkad.c` module allows a hacker to cause a service failure within the Linux operating system’s RxRPC session support.

The vulnerability of the rxkadverifypacket2 function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, stems from insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service...

ROS-20260929-73-0059

The vulnerability of the rxkaddecryptticket function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, stems from the lack of checking for the return value. Exploiting this vulnerability could allow a remote attacker to compromise...

CVE-2026-97583

In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...

EUVD-2026-86891

In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...

CVE-2026-97583 afs: Clear stale peer app data after address list changes

In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...

CVE-2026-97583

In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...

Linux Distros Unpatched Vulnerability : CVE-2026-97583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as...

CVE-2026-97583: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...

PT-2026-98523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the AFS component of the Linux kernel. The function afs fs probe fileserver fails to properly preserve the old address list when fetching the curren...

Exploit for Write-what-where Condition in Linux Linux_Kernel

Dirty-Frag Linux CVE-2026-43284 & CVE-2026-43500 Copied f...

ROS-20260918-73-0038

The vulnerability in the net/rxrpc/key.c module of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: rxrpc: Fix potential UAF after skb_unshare() failure

A flaw was found in the Linux kernel's rxrpc subsystem. This vulnerability arises when the system attempts to unshare a packet buffer, and the operation fails due to an allocation issue. This failure can lead to a Use-After-Free UAF condition, where the system attempts to access memory that has...

kernel: rxrpc: Fix potential UAF after skb_unshare() failure

A flaw was found in the Linux kernel's rxrpc subsystem. This vulnerability arises when the system attempts to unshare a packet buffer, and the operation fails due to an allocation issue. This failure can lead to a Use-After-Free UAF condition, where the system attempts to access memory that has...

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (CVE-2026-43500)

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpcinputcallevent and the RESPONSE handler in rxrpcverifyresponse copy the skb to a linear one before calling into the security o...