Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: s390: fixed the issue where double-free of GS and RI CBs occurs during fork failures. The pointers for guarded storage and runtime instrumentation control blocks are stored in the threadstruct of the associated task. These...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: riscv: The issue with the handling of SRSPIE set/clear operations during uprobe has been fixed. In riscv, the process of uprobe involves clearing spie before executing the origin insn, and setting spie after that. However, whe...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/kprobes: Fixed a null pointer reference in archpreparekprobe I found a null pointer reference in archpreparekprobe: echo 'p cmdlineprocshow' kprobeevents echo 'p cmdlineprocshow+16' kprobeevents The kernel attempted to re...

SUSE CVE-2026-89751

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

CVE-2026-89751: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

CVE-2026-55893: Heap-based Buffer Overflow

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...

CVE-2026-55894: Out-of-bounds Read

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

The vulnerability in the arch/powerpc/kernel/smp.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the arch/powerpc/kernel/smp.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-72400

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the create altmaps and memory blocks function where arch remove memory is called with a NULL altmap instead of params.altmap when create memory block devices fails whi...

CVE-2026-59763

Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...

CVE-2026-59763 Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...

CVE-2026-59763 Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...

CVE-2026-59763

The Git repository management system Gitea is vulnerable to resource amplification during package uploads due to unbounded Arch package file metadata . This issue can lead to service failures (Remote Denial of Service) as reported in related advisories like BDU:2026-15787 and ROS-20260813-73-0011...

EUVD-2026-58125

Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...

CVE-2026-59763 Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...

UBUNTU-CVE-2026-68286

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: perform u64stats updates under IRQ-disabled section In netdmpackettracekfreeskbhit and netdmhwtrappacketprobe, u64statsupdatebegin / u64statsinc / u64statsupdateend were called after...

CVE-2026-68286 drop_monitor: perform u64_stats updates under IRQ-disabled section

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: perform u64stats updates under IRQ-disabled section In netdmpackettracekfreeskbhit and netdmhwtrappacketprobe, u64statsupdatebegin / u64statsinc / u64statsupdateend were called after...

ROS-20260804-73-0018

The vulnerability in the arch/parisc/include/asm/uaccess.h component of the Linux operating system’s kernel is related to insufficient comparison. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

ROS-20260804-73-0019

The vulnerability of the arch/parisc/kernel/syscall.S component in the Linux operating system is related to insufficient comparison. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

kernel security update

4.18.0-553.150.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...