DEBIAN-CVE-2026-98228

In the Linux kernel, the following vulnerability has been resolved: mips: select CONFIGWEAKREORDERINGBEYONDLLSC from CONFIGEYEQ On I6500 CPU cores, lld and scd give no ordering guarantees same as all other instructions. To respect the assumption that archcmpxchg is fully ordered, we must inject...

CVE-2026-106222: Incorrect Authorization

Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

PT-2026-106895

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Sync component allows a remote attacker to obtain sensitive information by sending crafted network traffic. Recommendations Update Google Chrome to versio...

PT-2026-106509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw exists in the drm/msm component. The msm ringbuffer destroy and msm gem vm free functions use kfree to release objects containing a drm gpu scheduler structure...

PT-2026-106615

In the Linux kernel, the following vulnerability has been resolved: drop monitor: use timer shutdown sync to prevent timer rearming during teardown In drop monitor teardown paths net dm trace off set, net dm hw monitor stop, and error unwind paths in net dm trace on set and net dm hw monitor star...

PT-2026-106575

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci sync: Serialize local codec list cleanup hci dev close sync clears hdev-local codecs after releasing hdev-lock. Codec list additions and both traversals in sco sock getsockopt use that lock, but the close path does...

CVE-2017-14980

CVE-2017-14980 Sync Breeze Enterprise 10.0.28 - Ricerca su Buffer Overflow Obiettivo Studio di una vulnerabilità classica di buffer overflow basato su stack in un ambiente di laboratorio controllato a scopo didattico. L'obiettivo di questo progetto era comprendere meglio: Il fuzzing delle...

CVE-2026-28672

CVE-2026-28672 — Iniezione di comandi OS in UnixUserGroupBuilder di Apache Ranger Reproducer proof-of-concept eseguibile per l'iniezione di comandi OS nel modulo user-sync unixusersync di Apache Ranger. Durante l'enumerazione dei gruppi di ogni utente sincronizzato, UnixUserGroupBuilder esegue il...

CVE-2026-15718-who-put-ptrs-in-my-wasm

CVE-2026-15718 — wer hat ptrs in mein wasm gesteckt Proof-of-Concept-Exploit-Kette für CVE-2026-15718 , eine Fehlkompilierung durch fehlendes sync im Baseline -Compiler von Mozilla SpiderMonkey für WebAssembly Komponente „JavaScript: WebAssembly". Ein einziges array.fill mit null Durchläufen...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fixed a race condition in SNDCTLDSPSYNC There is a small race condition in the sndpcmosssync function, which is called from OSS PCM SNDCTLDSPSYNC ioctl. Specifically, the function calls sndpcmossmakeready first, a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fixed a null pointer dereference in btintelreadversion. If hcicmdsyncComplete is triggered and skb is NULL, then hdev-reqskb will also be NULL, which will cause this issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: qat – Fix for the ADFDEVRESETSYNC memory leak Using completiondone to determine whether the caller has gone away only works after a complete call. Furthermore, it’s still possible that the caller hasn’t yet called...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: Watchdog: sc520wdt: A possible use-after-free occurred in wdtturnoff. The remove method of this module calls deltimer. However, that function does not wait for the timer handler to complete. This means that the timer handler may...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: gpio: pca953x: Fixed the race condition in pca953xirqbussyncunlock. Ensure that i2clock is held when setting the interrupt latch and mask in pca953xirqBusSyncUnlock. This prevents race conditions. Another non-probing call site...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: i2c: pnx: Fixed a potential deadlock warning from the deltimersync call in isr. When deltimersync is called in an interrupt context, a warning is thrown due to a potential deadlock. The timer is only used to exit from...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358 – Ensure that CBR is set correctly. It was discovered that some devices have the CBR address set to 0, causing kernel panic when archsyncdmaforcpuall is called. This issue occurs when the system is booted fro...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free. References to i915requests may be trapped by the user space within a syncfile or dmabuf dma-resv and held indefinitely across different processes. To counte...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtl8xxxu: Added cancelworksync for c2hcmdwork. The workqueue may still be running when the driver is stopped. To avoid a use-after-free, call cancelworksync in rtl8xxxustop...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: Watchdog: Fixed a possible use-after-free in wdtstartup. The remove path of this module calls deltimer. However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In md/raid10, the issue of null-ptr-deref in raid10syncrequest has been fixed. In initresync, the mempool is initialized, and conf-havereplacemnt is set to 0 at the beginning of the sync process. closesync frees the mempool when...