Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed a leak of a released call in recvmsgMSGPEEK. Also, rxrpcrecvmsg was fixed to also release the reference it holds on a already-released call if MSGPEEK is specified the function holds a reference to the call regardles...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: rxrpc: A double-unlock issue in rxrpcrecvmsg has been fixed. This issue was addressed by correcting the double-unlock operation when handling OOB messages...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed a use-after-free UAF in rxgkissuechallenge. Fixed rxgkissuechallenge to free the page containing the challenge content after invoking the tracepoint, as the whdr passed to the tracepoint points to the just-freed page...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed a potential infinite loop in rxrpcrecvmsg. Also, fixed the wait in rxrpcrecvmsg by checking the OOB queue...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed the handling of ACKALL packets. The rxrpcinputackall function accepts ACKALL packets without checking whether the call is in a state where outstanding transmit buffers exist. Therefore, a forged ACKALL packet can...

CVE-2026-74436

A flaw was found in the Linux kernel. A synchronization issue in the rxrpc component, specifically between rxrpckernelchargeaccept and rxrpcdiscardprealloc, can lead to a use-after-free vulnerability. A local attacker could potentially exploit this flaw, causing a kernel preallocation worker to...

CVE-2026-74435

A flaw was found in the rxrpc subsystem of the Linux kernel. This vulnerability occurs when the rxrpcverifydata function fails to allocate a necessary buffer if the incoming data length is zero. An attacker could exploit this by sending specially crafted network packets, leading to a NULL pointer...

CVE-2026-74434

A flaw was found in the Linux kernel's rxrpc subsystem. When an out-of-band OOB message is read using the MSGPEEK flag in the rxrpcrecvmsgoob function, the message is incorrectly left on one queue while also being added to another. This can lead to the message being freed twice when the socket is...

CVE-2026-74432

A flaw was found in the rxrpc component of the Linux kernel. When the recvmsg function is called with the MSGPEEK flag, it fails to properly release a reference to an already-released call. This oversight can lead to a memory leak, potentially allowing a local attacker to cause a Denial of Servic...

CVE-2026-74431

A flaw was found in the Linux kernel's rxrpc network protocol implementation. This vulnerability could allow an attacker to trigger an infinite loop within the rxrpcrecvmsg function by manipulating out-of-band OOB queue handling. This could lead to a Denial of Service DoS condition, making the...

CVE-2026-74430

A flaw was found in the Linux kernel's rxrpc component. A remote attacker could send a specially crafted ACKALL packet that bypasses state validation. This improper handling of forged packets can lead to a null-pointer dereference, causing a Denial of Service DoS by crashing the system...

CVE-2026-74429

A flaw was found in the Linux kernel's rxrpc component. This vulnerability occurs when the system receives a reply data packet before any request data packets have been sent on a client call. An attacker could potentially exploit this by sending a specially crafted reply packet, leading to a kern...

CVE-2026-74428

A flaw was found in the Linux kernel's rxrpc subsystem. A double unlock vulnerability in the rxrpcrecvmsg function, when processing out-of-band OOB messages, could allow a remote attacker to cause a system crash. This issue leads to a Denial of Service DoS condition...

CVE-2026-74427

A flaw was found in the AFS Andrew File System component of the Linux kernel. During the teardown of an AFS network namespace, a work item responsible for managing preallocated resources rxrpc call/connection/peer queue may not be properly canceled. This improper resource handling could lead to a...

CVE-2026-72374

A flaw was found in the Linux kernel's AFS filesystem client. The AFS client uses an rxrpc server for callback notifications. Its message parsers incorrectly convert the -EAGAIN return value to 0 when the last packet has not been fully received but all currently queued data is consumed. This...

USN-8629-3 linux-hwe-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...

Linux Distros Unpatched Vulnerability : CVE-2026-74435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: rxrpcverifydata ensure rxdecbuffer alloc rxrpcrecvmsgdata calls rxrpcverifydata whenever the rxrpccall.rxdecbuffer is unallocated and assumes that upon...

Linux Distros Unpatched Vulnerability : CVE-2026-74431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential infinite loop in rxrpcrecvmsg Fix the wait in rxrpcrecvmsg also take...

Linux Distros Unpatched Vulnerability : CVE-2026-74429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before data transmission Fix rxrpcreceivingreply ...

Linux Distros Unpatched Vulnerability : CVE-2026-74428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix double unlock in rxrpcrecvmsg Fix a double unlock in rxrpcrecvmsg when dealing wi...