PT-2026-93636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dma-direct component where the dma direct alloc from pool function was modified to return a CPU address instead of a struct page pointer. While this change was...

PT-2026-93607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unprivileged user can cause a kernel panic system crash by requesting a gigantic hugepage allocation using MPOL PREFERRED MANY on systems where the Contiguous Memory Allocator CMA is...

PT-2026-93633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cpuidle component within the dt idle genpd functionality. The dt idle pd alloc function uses kasprintf to allocate the full node path and then sets pd-name to the...

PT-2026-93627

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory policy management where a sleeping function is called from an invalid context. When rhashtable insert slow rehashes a table under rcu read lock, it invokes...

PT-2026-93613

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NVMe subsystem where the nvme alloc ns function fails to wait for Sleepable Read-Copy-Update SRCU readers in its error path at out unlink ns. While the function...

PT-2026-93660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the usb put function instance function. This happens when the function attempts to dereference the fd variable within the fi structure to retrieve th...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: ata: libata-core: Fixed null pointer dereference on error If the ataportalloc call in atahostalloc fails, atahostrelease will be called. However, the code in atahostrelease attempts to free the members of the ataport struct...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Thermal: Intel: quarkdts: fixed error pointer dereference. If allocsocdts fails, we can simply return. Trying to free “socdts” will result in a Oops error...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the drivers/md/dm-table.c file, the dmtablecreate function in the Linux kernel from version 6.7.4 onwards may attempt to allocate more than INTMAX bytes using alloctargets. This can lead to a crash due to a missing check for the struct dmioctl.targetcount structure...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm: omapdrm: Added a check for the missing allocorderedworkqueue return value. This vulnerability could potentially lead to a NULL pointer being dereferenced, causing issues. Therefore, a check must be added for the return value...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bcache: The issue with bchbtreenodealloc has been fixed to ensure that the failure behavior is consistent. In some specific situations, the return value of bchbtreenodealloc might be NULL. This could lead to a potential NULL...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: mcb: Error handling in mcballocbus has been fixed. There are two bugs: 1 If idasimpleget fails, this code calls putdevicecarrier. However, we have not yet called getdevicecarrier, and this may lead to a use-after-free situatio...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: coda: Added a check for codairamalloc. Since codairamalloc may return a NULL pointer, it is better to check the return value to avoid dereferencing a NULL pointer, just like with the other cases...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: AppArmor: A memory leak has been fixed in allocns. After changes in commit a1bd627b46d1 “AppArmor: sharing the profile name during replacement”, the hname member of the struct aapolicy is not a valid slab object; however, it is a...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: android:binder: Stop saving a pointer to the VMA. Do not record a pointer to a VMA outside of the mmaplock for later use. This is unsafe, and there are several failure scenarios where the recorded VMA pointer might be freed durin...

Astra Linux – Vulnerability in ffmpeg

There is a denial-of-service vulnerability in FFmpeg 4.2 due to a memory leak in the vframealloc function in frame.c...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: f2fs: A sanity check was performed on curseg-alloctype. As Wenqing Liu reported in Bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=215657 - Overview In the UBSAN library, there was an issue where out-of-bounds access occurre...

CVE-2026-89514 scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock

In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Use GFPATOMIC for VLAN alloc under spinlock fnicfcoeprocessvlanresp allocates a VLAN descriptor with kzallocobj default GFPKERNEL while holding vlanslock via spinlockirqsave. GFPKERNEL may sleep, which is not allowed ...

aquatic_http (0.2.0), aquatic_http_load_test (0.2.0) +121 more potentially affected by unknown CVE via owned-alloc (0.2.0)

owned-alloc CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on owned-alloc and may be impacted: - aquatichttp 0.2.0 - aquatichttploadtest 0.2.0 - concurrent-sharded-stack =0.1.0, =0.0.1, =0.1.0, =0.1.2 - icentral-3p 0.1.0 -...

SUSE CVE-2026-80784

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcppmdestroy empties msk-pm.annolist and msk-pm.userspacepmlocaladdrlist under msk-pm.lock during socket teardown, dropping the lock between the two. A concurrent...