Astra Linux - vulnerability in poppler, poppler-22

Poppler versions 24.06.1 through 25.x prior to 25.04.0 allow stack consumption and a SIGSEGV due to deeply nested structures within the metadata of a PDF document—for instance, a regular expression used to match a long pdfsubver string. This behavior occurs in Dict::lookup, Catalog::getMetadata,...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations Some of the fp/vmx code in sstep.c assumes a certain maximum size for the instructions being emulated. However, the actual size of these operations is determined separately in...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix page reclaim for dead peer hairpin When adding a hairpin flow, a firmware-side send queue is created for the peer net device, which claims some host memory pages for its internal ring buffer. If the peer net device...

Astra Linux – vulnerability in jackson-databind

Jackson Databind versions prior to 2.13.0 allow a Java StackOverflow exception and denial of service caused by a large number of deeply nested objects...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/brs: Fix kernel address leakage A user-only branch stack can contain branches originating from the kernel. As a result, kernel addresses are exposed to user space even when PERFSAMPLEBRANCHUSER is requested. On AMD...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a struct displayidtiledblock and reads the full fixed layout up to tile-topologyid7 without checking block-numbytes. The DisplayID...

Astra Linux – vulnerability in xorg-server

A stack-based buffer overflow vulnerability was found in the X.Org X server and Xwayland. The X server contains multiple stack buffers with a size of XkbMaxShiftLevel XkbNumKbdGroups; however, CheckKeyTypes fails to validate or restrict non-canonical key types to XkbMaxShiftLevel. A client can th...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fix memory leak in array reallocation for stack state If an error NULL is returned by krealloc, callers of reallocarray were setting their allocation pointers to NULL; however, on error krealloc does not modify the...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group in the device. The group contains a list of ACLs. In turn, each ACL points to a...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy-enablecompletion only when we wait for it pm8001phycontrol populates the enablecompletion pointer with a stack address, sends a PHYLINKRESET / PHYHARDRESET, waits 300 ms, and returns. The problem arises when...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: avoid stack overflow warnings with clang A previous patch addressed a issue related to KASAN in stv0367; now a similar problem has emerged with clang: drivers/media/dvb-frontends/stv0367.c:1222:12: Error:...

Astra Linux – vulnerability in rsync

A flaw was found in rsync; it can be triggered when rsync compares file checksums. This flaw enables an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory, resulting in the gradual leakage of one byte of uninitialized stack data a...

SUSE CVE-2026-98413

In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avchaspermnoaudit avchaspermnoaudit is documented to return a copy of the access decision in @avd, but its early return for an empty requested permission set leaves the buffer untouched. All...

SUSE CVE-2026-101337

When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD...

SUSE CVE-2026-101339

A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field a HIP Rendezvous server can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is...

SUSE CVE-2026-101341

Tokens of text in RDATA of for example TXT records under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which ar...

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data

A flaw was found in ghostscript. This vulnerability allows a remote attacker to trigger an application crash leading to a Denial of Service DoS or potentially execute arbitrary code by tricking a user or service into processing a specially crafted file. The issue stems from a stack-based buffer...