CVE-2026-74643

A flaw was found in the Linux kernel's DAMONSAMPLEMTIER module. A local user can trigger a division-by-zero error in the damosquotascore function by providing zero values for the node0memusedbp or node0memfreebp parameters when enabling the module. This vulnerability leads to a kernel crash,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: The calltrace warning in amddrmbuddyfini has been fixed. The following call trace was observed when the amdgpu driver was removed. This issue arises because the BOs allocated for psp are not freed until the driver is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Nullifies the cq-dbg pointer in mlx5debugcqRemove Before this patch, if mlx5CoreDestroyCq failed, the destruction operations continued. However, mlx5CoreDestroyCq could be called again by the user, causing additional...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: fpga: microchip-spi: fixed the issue where zero value of headersize was read during mpfopsParseHeader. In this function, headersize is read from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevention of certain integer underflows My static checker reports the following issue: drivers/infiniband/hw/irdma/ctrl.c:3605 irdmascceqinit Warning: Can subtract underflow for ‘info-dev-hmcfpmmisc.maxceqs’? It seem...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: hwmon: In the aspeed-g6-pwm-tach driver, the aspeedtachvaltorpm function calculates the fan RPM using the tachometer value. However, it does not check whether the tachometer value is zero before performing the division. If the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Ensure that dmafencededuparray is robust against inputs with a count of 0. The function dmafencededuparray returns 1 when called with numfences == 0. In this case, the body of the for-loop never executes; j remains at ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fixed a division by zero in initializetimer. The ALSA timer SNDUTIMER, which is controlled by the user space, allows an unprivileged user to set the hardware resolution of the sndtimer to an arbitrary 64-bit value via...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xsk: Reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or more continuation descriptors, the Tx consumer can be advanced past...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fixed a divide-by-zero crash in the fan speed reading using TOCTOU. If the fan data becomes 0 between the FANDATAVALID check and the FANPERIODTORPM conversion, it will cause a divide-by-zero crash due to a race...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fixed ext2setsize when len is page-aligned. The PAGEALIGNx macro returns the next highest value that is a multiple of the page size. However, if x is already page-aligned, it simply returns x. Therefore, if x is passed ...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A division-by-zero error on some AMD processors may potentially return speculative data, resulting in a loss of confidentiality...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: A zero-division error occurs when disabling tc-cbs. The commit b8c43360f6e4 “net: stmmac: No need to calculate the speed divider when offload is disabled” allows the “porttransmitratekbps” parameter to be set to 0...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed a divide-by-zero issue in calculatemcachesetting when dealing with a zero-area viewport. If a plane reaches calculatemcachesetting with a zero-area viewport, calculatemcachesetting exits early with nummcach...

CVE-2026-74632

A flaw was found in the Linux kernel's memory management mm/hugememory. A race condition can occur between a memory shrinker and a concurrent page fault when handling huge zero pages. This race can lead to the hugezeropfn being incorrectly set, causing the huge zero page to be misidentified as an...

BIT-COSIGN-2026-22703 Cosign verification accepts any valid Rekor entry under certain conditions

Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

CVE-2026-71832: Divide By Zero

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrenthelper.cc, which allows a remote malicious user to cause a Denial of Service...

CVE-2026-71832

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrenthelper.cc, which allows a remote malicious user to cause a Denial of Service...

PT-2026-81007

Name of the Vulnerable Software and Affected Versions Aria2 versions prior to 1.37.1 Description A Divide By Zero issue exists in the src/bittorrent helper.cc file. This flaw allows a remote malicious user to trigger a Denial of Service, which is a condition where the software becomes unavailable...