Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix memory leak in ath11kpeerrxfragsetup cryptoallocshash allocates resources, which should be released by cryptofreeshash. When ath11kpeerfind fails, there is a memory leak. Add the missing cryptofreeshash to fix...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: Binder: Fix UAF of alloc-vma in race with munmap cmllamas: Clean forward port from commit 015ac18be7de “Binder: fix UAF of alloc-vma in race with munmap” in 5.10 stable. It is needed in mainline after the revert of commit...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: Add missing check for allocorderedworkqueue Add a check for the return value of allocorderedworkqueue, as it may return a NULL pointer and lead to a NULL pointer dereference in hdmihdcp.c and hdmihpd.c. Patchwork:...

PT-2026-106653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dmaengine pxa component where hardware descriptors are double counted. This occurs because pxad alloc desc was converted to use kzalloc flex, which automatically...

PT-2026-106551

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An integer overflow occurs in the encrypted key alloc function when calculating datablob len. Because this value is stored in a u16, results exceeding U16 MAX lead to a truncated allocation...

PT-2026-115708

In the Linux kernel, the following vulnerability has been resolved: KEYS: encrypted: fix integer overflow of datablob len encrypted key alloc stores datablob len in a u16. It is computed from multiple string and payload lengths. If the result exceeds U16 MAX, the assignment truncates the allocati...

PT-2026-98568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the cpufreq policy alloc function initializes the policy-rwsem semaphore after the kobject init and add function has already created the policy sysfs directory and...

PT-2026-98833

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory leaks occur in the rtl8723bs driver within the staging area of the Linux kernel. The functions issue beacon, issue probersp, and issue asocrsp use alloc mgtxmitframe to obtain a...

PT-2026-98510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write issue exists in the bnxt en driver. The bnxt alloc agg idx function is designed to map firmware TPA IDs to software IDs used to index the rxr-rx tpa array. When th...

PT-2026-98514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt queue mem alloc function performs a shallow copy of the live RX ring into a clone. While some pointers are cleared, rx tpa and rx tpa...

PT-2026-98781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the netfs component during unbuffered write operations. When the function netfs alloc subrequest fails, it returns a NULL value for the subreq...

PT-2026-98665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An ineffective error check exists in the nested domain allocation process. The function amd iommu pdom id alloc returns an integer representing a domain ID on success or a negative error...

PT-2026-98832

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/srpt component where the srpt alloc rw ctxs function fails to properly reset counters during an error unwind path. When a failure occurs during a multi-buffer...

PT-2026-98547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vdpa ifcvf component where unsupported provisioned features are not handled correctly. Specifically, the system fails to route these errors through the common erro...

PT-2026-98511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt queue mem alloc function fails to propagate return values from bnxt alloc one tpa info data. When bnxt alloc one tpa info data return...

PT-2026-98077

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where perf ftrace function unregister calls unregister ftrace function without verifying if the ftrace ops was successfully registered. This leads to a warning in...

PT-2026-104984

In the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in unregister ftrace function perf ftrace function unregister unconditionally calls unregister ftrace function without checking whether the ftrace ops was ever successfully registered. This triggers a WAR...

PT-2026-104852

In the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dma alloc coherent The return value of dm1105 dma map, which handles DMA memory allocation, is ignored in dm1105 hw init. If dma alloc coherent fails, the driver will proceed using a NUL...

PT-2026-98096

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the RDMA counter component when the rdma counter bind qp function fails within alloc and bind. The error path jumps to err mode, which frees the counter but fails...

PT-2026-97895

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the svcrdma component where the system fails to reject Write or Reply chunks that have a segcount field set to zero. Because the xdr check write chunk function only...