Astra Linux - Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Clear copies of clear-key structures on failure Clear all sensitive data from the stack for all IOCTLs that convert a clear-key into a protected- or secure-key...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libceph: The handler error from monhandleauthdone should be returned. Currently, any error from cephauthhandlereplydone is propagated via finishauth, but it is not returned from monhandleauthdone. This results in higher layers...

Astra Linux – vulnerability in Thunderbird

When an HTTPS page was embedded within an HTTP page, and a service worker was registered for the former, the service worker could have intercepted the request for the secure page despite the fact that the iframe did not constitute a secure context due to the insecure framing. This vulnerability...

Astra Linux – Vulnerability in python-urllib3

The urllib3 library before version 1.24.2 in Python mishandles certain cases where the desired set of CA certificates differs from the CA certificates stored in the operating system’s store. As a result, SSL connections succeed in situations where a verification failure would be the correct...

Astra Linux – Vulnerability in curl

libcurl will reuse a previously established connection even when options related to TLS or SSH have been changed, which should prevent such reuses. libcurl stores previously used connections in a connection pool, allowing for reuse if one of them matches the current setup. However, several TLS an...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak For certain sev ioctl interfaces, the length parameter passed might be less than or equal to SEVFWBLOBMAXSIZE, but larger than the data returned by the PS...

Astra Linux – vulnerability in Firefox

When a secure cookie existed in the Firefox cookie jar, an insecure cookie for the same domain could have been created; it should have silently failed instead. This could have resulted in desynchronization of expected results when reading from the secure cookie. This vulnerability affects Firefox...

Astra Linux – Vulnerability in Intel Microcode

Unauthorized error injection in IntelR SGX or IntelR TDX for certain IntelR XeonR processors may allow a privileged user to potentially enable privilege escalation through local access...

Astra Linux – Vulnerability in edk2

In Ubuntu’s EDK2, a insecure default setting was left enabled, allowing UEFI Shell to be used. This enables an attacker with access to the operating system to bypass Secure Boot...

Astra Linux – Vulnerability in grub2

A flaw was discovered in the HFS filesystem. When reading the name of an HFS volume during the grubfsmount function, the HFS filesystem driver uses the user-provided volume name as input without properly verifying the length of that name. This issue may lead to a heap-based out-of-bounds write...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: soc: amlogic: Fix refcount leak in meson-secure-pwrc.c In mesonsecurepwrcprobe, there is a refcount leak in one fail path...

Astra Linux – vulnerability in grub2

When reading the .mo file during grubmofileopen, grub2 fails to validate an integer overflow during the allocation of its internal buffer. A specially crafted .mo file can cause the buffer size calculation to overflow, resulting in out-of-bounds reads and writes. This flaw enables an attacker to...

Astra Linux – vulnerability in libnbd

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier URI. This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell SSH process,...

Astra Linux - vulnerability in twisted

Twisted is an event-driven framework for Internet applications, supporting Python 3.6+. Prior to version 22.2.0, the Twisted SSH client and server implementation allowed accepting an infinite amount of data for the peer’s SSH version identifier. This eventually results in a buffer using all...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - Block: Fixed integer overflow in BLKSECDISCARD. - I independently rediscovered this issue by making the commit: 22d24a544b0d49bbcbd61c8c0eaf77d3c9297155. - Block: Fixed overflow in blkioctldiscard. But there’s still a proble...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2 in versions prior to 2.06, where it incorrectly enabled the use of the ACPI command when Secure Boot was enabled. This flaw allows an attacker with privileged access to create a Secondary System Description Table SSDT containing code that can overwrite the Linux...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: fs: Export anoninodemakesecureinode and fix secretmem LSM bypass Exporting anoninodemakesecureinode enables KVM guestmemfd to create anonymous inodes with proper security context. This replaces the current practice of calling...

Astra Linux – vulnerability in grub2

A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grubgettextgetstrfromposition may overflow, resulting in an Out-of-bounds write. An attacker can exploit this issue to overwrite grub2’s sensitive heap data, ultimately enabling circumvention ...

Exploit for Authentication Bypass by Spoofing in Ivanti Connect_Secure

ivanti-cve-2026-104935-check Unauthenticated detection for th...

Cisco Secure Firewall ASA 9.16 FTD Check

Nuclei templates perform unauthenticated version-banner checks for potentially affected Cisco Secure Firewall ASA and FTD installations covered by the September 2026 hardening advisory...