Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warnings caused by improper field usage The definition of reg-accesswidth varies based on the reg-spaceid type. The ACPIADRSPACEPLATFORMCOMM type utilizes accesswidth to denote the PCC region; if this...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142710 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2sumrightmostrec BUG On-disk corruption setting...

PT-2026-128646

In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Assign .num before accessing .hws Commit f316cdff8d67 "clk: Annotate struct clk hw onecell data with counted by" annotated the hws member of 'struct clk hw onecell data' with counted by, which informs the bounds...

PT-2026-117067

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ac100 rtc register clks function where the .num member of struct clk hw onecell data is assigned only after elements are stored in the .hws array. When using a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131754)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131754 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT sectorsperclusters When the NTFS BOOT sectorsperclusters field is 0x80, i...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fixed signed integer overflow in ip6appenddata Resurrect ubsan overflow checks; ubsan reports this warning. Fix it by changing the length variable’s type to sizet. UBSAN: signed-integer-overflow in...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nbd: Fixed incomplete validation of ioctl arguments. We identified an alarm caused by incomplete validation of ioctl arguments without proper verification. The UBSAN warning appears as follows: UBSAN: Undefined behavior in...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: nvmem: Fixed shift-out-of-bound UBSAN issue involving byte-size cells When a cell’s ‘nbits’ value is a multiple of BITSPERBYTE, the logic p &= GENMASKcell-nbits%BITSPERBYTE - 1, 0; results in undefined behavior, as nbits modulo...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds/overflow in nilfssb2badoffset Patch series “nilfs2: fix UBSAN shift-out-of-bounds warnings on mount time”. The first patch fixes a bug reported by syzbot, while the second patch addresses the...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix “UBSAN: shift-out-of-bounds error” This patch ensures that the RX ring size rxpending is not set below the permitted length. This prevents UBSAN shift-out-of-bounds errors when users pass small or zero ring size...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add AMLNOOPERANDRESOLVE flag to Timer ACPICA commit 90310989a0790032f5a0140741ff09b545af4bc5 According to the ACPI specification 19.6.134, no arguments are required to be passed for the ASL Timer instruction. To handle th...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Do not return “unset power” in ieee80211gettxpower. We may receive a UBSAN warning if ieee80211gettxpower returns the INTMIN value that mac80211 internally uses for “unset power level”. UBSAN:...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Atacade: Ahci: Matching EMMAXSLOTS with SATAPMPMAXPORTS UBSAN reports an array-index-out-of-bounds issue: 1.980703 Kernel: UBSAN: Array-index out of bounds in /build/linux-9H675w/linux-5.15.0/drivers/ata/libahci.c:968:41 1.980709...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use a u64 type for the bankmap. The maximum number of MCA banks is 64 MAXNRBANKS; see a0bc32b3cacf “x86/mce: Increase the maximum number of banks to 64”. However, the bankmap, which contains a bitfield indicating whi...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1783414723)

"The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1783414723 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Use VMMAP instead of VMALLOC for ringbuf After commit...

Rocky Linux 10.0 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_7956)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257956 advisory. kernel: dm-flakey: Fix memory corruption in optional corruptbiobyte feature CVE-2025-21966 kernel: iscsiibft: Fix UBSAN shift-out-of-bounds warning in...

DEBIAN-CVE-2026-98088

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumaskofnode call in baseassignreplyqueues devtonode can return NUMANONODE -1 on systems without NUMA topology information for the PCI device, such as single-socket boards that don't expose...

CVE-2026-88357

nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16t or wider integer pointers and directly dereferenced without alignment checks. This results in...

PT-2026-97863

Name of the Vulnerable Software and Affected Versions tinyexpr version 4a7456e Description An incorrect buffer size calculation occurs in the new expr function. For arity-0 expression nodes, such as constants, variables, and zero-argument functions, the function allocates less memory than the siz...

SUSE CVE-2026-90386

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...