CVE-2026-99071

In the Linux kernel, the following vulnerability has been resolved: ipv4: do not warn on route notification size race Commit 680aea08e78c "net: ipv4: Emit notification when fib hardware flags are changed" added asynchronous route notifications for hardware flag changes. fibaliashwflagsset sizes t...

PT-2026-128627

In the Linux kernel, the following vulnerability has been resolved: perf: Fix race between perf event exit task and perf pending task A race condition exists between perf event exit task and perf pending task during begin new exec. During begin new exec, perf event exit task may be called, and th...

PT-2026-116857

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the KVM arm64 component, the pkvm vcpu init sve function only clamps the upper bound of the host-provided sve max vl variable. This allows an invalid vector length to reach the sve...

PT-2026-106657

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 wifi module where the HE 6 GHz Band Capability element is included in the probe request for every band when 6 GHz is supported. Failure to include the size o...

PT-2026-115711

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't filter by BSS type when removing stale entries When an assoc AP switches to a channel that already has a BSS entry, cfg80211 update assoc bss entry removes that entry before rehashing the real one, since the...

PT-2026-106607

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A routing loop can be configured by a user with CAP NET ADMIN privileges. When ipip fill forward path or ip6 tnl fill forward path look up the route to a tunnel's remote endpoint and the...

PT-2026-115822

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz capability in the scan elems len The HE 6 GHz Band Capability element is in the probe request for every band if 6 GHz is supported, so add the size to scan ies len. Otherwise, building probe request...

PT-2026-98614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the configfs component where the create link function reads the target's configfs dirent from item-ci dentry-d fsdata. This process relies on an item reference taken b...

PT-2026-97963

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the phy-rcar-gen3-usb2 component where the devm disable action for the VBUS regulator was only registered if the caller explicitly requested enablement. Because devm...

PT-2026-94823

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where btf find struct field initializes a new seen mask for every recursive descent. This prevents unique special fields at...

PT-2026-94491

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kernel cipher manager KCM where the kcm parse func strparser function calls bpf prog run pin on cpu without establishing an RCU read-side critical section. RCU...

PT-2026-94566

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/cma component where a warning is triggered in the res to rt function during asynchronous address resolution. The problem occurs within the addr handler functi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - In net: The variable sk-skfamily was read once in the function skmcloop. - syzbot is frequently using IPV6ADDRFORM; it managed to trigger the WARNONONCE1 function in skmcloop. We still have many more similar issues that need...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix errant WARNONONCE in j1939sessiondeactivate The statement “j1939sessiondeactivate should be called with a session ref-count of at least 2” is incorrect. In some concurrent scenarios, j1939sessiondeactivate can be...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: Silence the warning when evicting an inode with dioreadnolock When evicting an inode with the default dioreadnolock setting, it may cause problems because the unwritten extents are converted by the kworker after writeback,...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb:typec:tipd: The WARNON message in tps6598xblockread has been removed. Calling tps6598xblockread with a parameter length that exceeds the allowed limit can be handled by simply returning an error. There is no need to cause...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ext4: Do not report a bug if someone dirty pages without first consulting ext4. The unpinuserpagesremote function dirty pages without properly warning the file system in advance. Jan Kara noted this race condition in 20181...

PT-2026-90885

In the Linux kernel, the following vulnerability has been resolved: net: remove WARN ON ONCE from sk mc loop sk mc loop can be called for sockets that are neither AF INET nor AF INET6 e.g. AF PACKET sockets when sending packets via raw/packet socket over virtual devices such as VRF or ipvlan. In...

PT-2026-86733

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN ON on -ENOMEM in cfg802154 switch netns It's pointless to call WARN ON in case of an allocation failure in dev change net namespace and device rename, since it only leads to useless splats caused by...

PT-2026-82907

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tracing/probes component where a user can easily trigger a WARN ON ONCE condition. This occurs when adding a kprobe event based on a raw address that utilizes a BT...