PT-2026-116994

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the nitro enclaves component. When the ne create vm ioctl function fails a SLOT ALLOC request after anon inode getfile has succeeded, the error path...

PT-2026-128525

In the Linux kernel, the following vulnerability has been resolved: nitro enclaves: fix use-after-free on SLOT ALLOC failure When ne create vm ioctl fails the SLOT ALLOC request after anon inode getfile has succeeded, the error path calls fputenclave file and then frees ne enclave. In normal...

PT-2026-116745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the llc alloc frame function where link-layer headroom is reserved based solely on the device type. This approach is insufficient for stacked Ethernet devices, such as...

PT-2026-128356

In the Linux kernel, the following vulnerability has been resolved: llc: reserve device headroom for allocated frames llc alloc frame reserves link-layer headroom using the device type. This is insufficient for stacked Ethernet devices such as VLAN devices, where vlan dev hard header pushes a VLA...

Astra Linux – vulnerability in linux-5.15, linux-5.10, linux

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate to remain uninitialized. Then nilfsismetadatafileinode returns true and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fixed the error handling logic in idxdcdevregister. If the call to allocchrdevregion fails, the already allocated resources are being leaked. Added the necessary error handling logic to address this issue...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr allocsize check...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netlink: Fixed wraparounds of sk-skrmemalloc. Netlink has this pattern in some places: c if atomicread&sk-skrmemalloc sk-skrcvbuf atomicaddskb-truesize, &sk-skrmemalloc; This issue was also fixed in commit 5a465a0da13e “udp: Fixe...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6779 – Added a check for the return value of mtkallocclkdata. The check is added to avoid dereferencing a NULL pointer...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: mt76: Fix use-after-free by removing a non-RCU wcid pointer This fixes an issue identified by KASAN related to use-after-free in mt76txqschedule; it protects mtxq-wcid using rculock between mt76txqschedule and stainfoalloc, free...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: destroy cm id before destroy qp to avoid use after free We should always destroy cmid before destroy qp to prevent the occurrence of a cma event after qp was destroyed, which could lead to use after free. In the RDMA...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: FUSE: Initialize beyond-EOF page contents before setting uptodate Unlike fusedoreadpage, fusenotifystore does not enable page zeroing since it can be used to modify partial page contents. Therefore, fusenotifystore must be more...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aeadrequestfree to match aeadrequestalloc Use aeadrequestfree instead of kfree to properly free memory allocated by aeadrequestalloc. This ensures that sensitive crypto data is zeroed before being freed...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Do not call scsiremovehost in pm8001alloc. Calling scsiremovehost before scsiaddhost results in a crash. BUG: Kernel NULL pointer dereferencing, address: 0000000000000108 RIP: 0010: devicedel+0x63/0x440 Call Trace:...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In the dmstats function, check for and propagate the allocpercpu failure. Check the return value of allocprecpu, and return an error from dmstatsinit if it fails. Update allocdev to fail if dmstatsinit does so. Otherwise, a NULL...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix error handling of scsihostalloc After a device is initialized via deviceinitialize, or its name is set via devsetname, the device must be freed using putdevice. Otherwise, the device name may be leaked since it is...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix the sk-skforwardalloc warning in skstreamkillqueues When running testsockmap selftests, the following warning appears: WARNING: CPU: 2 PID: 197 at net/core/stream.c:205 skstreamkillqueues+0xd3/0xf0 Call Trace:...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add a check for mgmtallocskb in mgmtdeviceconnected Add a check on the return value of mgmtallocskb in mgmtdeviceconnected to prevent null pointer dereferencing...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Added a missing check for allocorderedworkqueue. Added a check on the return value of allocorderedworkqueue, as it may return a NULL pointer, leading to a NULL pointer dereferencing issue. Patchwork:...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix sysfs leak in allociommu iommudevicesysfsadd is called before, so it must be cleaned on subsequent errors...