Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerabilities have been resolved: IB/hfi1: Restore allocated resources in case of failed copyout operations. Correct a resource leak that occurred due to errors...

Astra Linux – Vulnerability in bind9

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode the available memory to the point where named crashes occur due to lack of resources...

RHSA-2026:58834 Red Hat Security Advisory: resource-agents security update

Bulletin has no description...

RHSA-2026:58820 Red Hat Security Advisory: resource-agents security update

Bulletin has no description...

RHSA-2026:58811 Red Hat Security Advisory: resource-agents security update

Bulletin has no description...

pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...

Important: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...

Important: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...

CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...

CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...

The vulnerability of the function dw_i3c_master_i2c_xfers() in the Linux kernel’s dw-i3c-master.c component allows a hacker to cause a service failure.

The vulnerability of the dwi3cmasteri2cxfers function in the dw-i3c-master.c component of the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the md/raid1.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the md/raid1.c component of the Linux kernel lies in the fact that resources are not released after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mprls0025pa_spi.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mprls0025paspi.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the thermal_of.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the thermalof.c component in the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `fs/smb/server/smb2pdu.c` component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/smb/server/smb2pdu.c component in the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the btrfs_sync_file() function in the include/trace/events/btrfs.h module of the Linux kernel allows a malicious actor to access protected information or cause service failures.

The vulnerability of the btrfssyncfile function in the include/trace/events/btrfs.h module of the Linux kernel stem from improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...

The vulnerability in the block/null_blk/main.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the block/nullblk/main.c component of the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...