CaptainAI-LPE-CVE-2026-52993

CVE-2026-52993 — reproduction Double-free / slab-use-after-free in the Linux kernel TIPC fragment reassembly path, tipcbufappend in net/tipc/msg.c. Reproduction this repo | ---|--- Component| net/tipc/msg.c — tipcbufappend / tipcmsgvalidate Class| CWE-415 double free manifests as...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151136 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-free Packet processing uses CT limit state under RCU...

UBUNTU-CVE-2026-99271

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...

CVE-2026-99271

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...

DEBIAN-CVE-2026-99271

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...

CVE-2026-99271

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...

CVE-2026-99271 ALSA: line6: Clear prev_fbuf on capture buffer release

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...

EUVD-2026-119291

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...

CVE-2026-99271

The Linux kernel contains a slab-use-after-free read vulnerability in the ALSA line6 driver. The issue occurs because the line6_buffer_release() function frees the capture PCM stream buffer using kfree() but fails to clear the line6pcm->prev_fbuf pointer. If playback is subsequently initiated ...

CVE-2026-99271 ALSA: line6: Clear prev_fbuf on capture buffer release

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal: BUG: KASAN: slab-use-after-free in createimpulsetestsignal...

Linux Distros Unpatched Vulnerability : CVE-2026-99271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: line6: Clear prevfbuf on capture buffer release A KASAN slab-use-after-free read was reported in submitaudioouturb when generating an impulse test signal:...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ocfs2: synchronize heartbeat callbacks with o2net teardown Patch series "ocfs2: harden heartbeat teardown races". This series fixes two OCFS2 heartbeat/o2net teardown races found by KASAN. This patch of 2: Heartbeat callbacks sta...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-free Packet processing utilizes the CT limit state under RCU, while netns teardown frees that state via ovsmutex. The CT limit pointer was neither removed from readers nor protected by...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: libceph: Refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic FDB entries that reference a nexthop id The commit referenced in the Fixes tag allows VXLAN FDB entries to point to FDB nexthops, enabling overlay traffic to be load balanced across multiple VTEPs. Such...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: unlock immaprwsem before releasing after-split folios foliosplit keeps dereferencing the mapping after the split: shmemunchargemapping-host and remappage while the folios are still frozen/locked, and...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 “vsock/virtio: stop workers during the .remove” made the RX worker jump to its common exit when rxrun is clear. That exit still refills the RX queue wh...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherits neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

Linux Distros Unpatched Vulnerability : CVE-2026-99246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: protect node reset trace dump with node lock The tipcnoderesetlinks trace event asks tipcnodedump to walk the node's link entries. Unlike the other node...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: Introduce slaveslock to avoid race condition and UAF The teql master-slaves singly linked list is not protected against multiple writes. It can be modified concurrently from teqlmasterxmit, teqldequeue,...