Astra Linux - уязвимость в linux-5.10, linux-5.15, linux-6.1, linux

A flaw was discovered in the ATA over Ethernet AoE driver within the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt field of the struct netdevice structure. A use-after-free condition may occur due to concurrent operations between the update of the refcnt and accesses...

Astra Linux - уязвимость в linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: aoe: The cleandevicerqlist function in aoedevdowndev was corrected. The rqlist of an AOE device contains accepted block requests that are waiting to be transmitted to the AOE target. This queue was added as part of the transition...

Astra Linux - уязвимость в linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: “aoe”: avoided potential deadlock at setcapacity. setcapacity is now moved outside of the section handled by &d-lock. This prevents possible unsafe locking scenarios due to interrupts: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock;...

Astra Linux - уязвимость в linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: “aoe”: fixed the potential use-after-free issue in multiple locations. Regarding the fix for CVE-2023-6270, f98364e92662 “aoe: fixed the potential use-after-free issue in aoecmdcfgpkts” modifies the behavior so that the tx...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013472 advisory. In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts This patch is against CVE-2023-627...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-006568)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006568 advisory. In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts This patch is against CVE-2023-627...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38326)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38326 advisory. - In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rqlist in aoedevdownde...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003557 advisory. The aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992775 advisory. In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e926...

Siemens SIMATIC S7-1500 Use After Free (CVE-2024-49982)

In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e92662 aoe: fix the potential use-after- free problem in aoecmdcfgpkts makes tx calling devput instead of doing in aoecmdcfgpkts. It...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990837 advisory. In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e926...

Siemens SIMATIC Devices Use After Free (CVE-2024-26898)

In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

USN-7833-1: Linux kernel vulnerabilities

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to...

EUVD-2023-58514

Malicious code in bioql PyPI...

EUVD-2025-20920

Malicious code in bioql PyPI...

USN-7776-1 linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...

Linux Distros Unpatched Vulnerability : CVE-2025-38326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aoe: clean device rqlist in aoedevdowndev An aoe device's rqlist contains accepted block requests that are waiting to be transmitted to the aoe target. This que...

SUSE CVE-2025-38326

In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rqlist in aoedevdowndev An aoe device's rqlist contains accepted block requests that are waiting to be transmitted to the aoe target. This queue was added as part of the conversion to blkmq. However, the queue w...

CVE-2025-38326

In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rqlist in aoedevdowndev An aoe device's rqlist contains accepted block requests that are waiting to be transmitted to the aoe target. This queue was added as part of the conversion to blkmq. However, the queue w...

DEBIAN-CVE-2025-38326

In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rqlist in aoedevdowndev An aoe device's rqlist contains accepted block requests that are waiting to be transmitted to the aoe target. This queue was added as part of the conversion to blkmq. However, the queue w...