Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: Incorrect arithmetic operations when fetching VLAN header bits. If the offset plus the length exceeds the range of the Ethernet + VLAN header, then the length is adjusted to copy the bytes that are within t...

CVE-2026-89533

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix offset arithmetic in readchunkrange svcrdmareadchunkrange walks a Read chunk's segment list to build a sub-range starting at byte offset and spanning length bytes for a Position-Zero or Call chunk. Two arithmetic...

CVE-2026-52968

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic kvms390pciaifenable, kvms390pciaifdisable, and aenhostforward index the GAIT by manually multiplying the index with sizeofstruct zpcigaite. Since...

The vulnerability of the xrep_revalidate_allocbt() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the xreprevalidateallocbt function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the kdc/do_tgs_req.c component of the Kerberos authentication protocol allows a attacker to induce a service failure.

The vulnerability of the kdc/dotgsreq.c component of the Kerberos authentication protocol is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the `nvmet_tcp_handle_h2c_data_pdu()` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the nvmettcphandleh2cdatapdu function in the operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __kernel_read() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the kernelread function in the operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s ASoC kernel component, which allows a hacker to cause a service failure

The vulnerability of the ASoC kernel component of the operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

CVE-2026-24872

CVE-2026-24872 affects SkyFire_548 (before 5.4.8-stable5). The issue is due to improper pointer arithmetic in SkyFire_548. The vulnerability is rated CVSSv3.1: 9.8 (CRITICAL) with Network attack vector, no privileges, no user interaction, and high impact on confidentiality, integrity, and availab...

CVE-2026-24872 Pointer arithmetic error in SkyFire_548

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire548.This issue affects SkyFire548: before 5.4.8-stable5...

The vulnerability of the ac_ioctl() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the acioctl function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the x86_pmu_stop() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the x86pmustop function in the Linux operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the blk_should_throtl() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the blkshouldthrotl function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Davinci kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the Davinci kernel component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the automountfullpath() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the automountfullpath function fs/smb/client/namespace.c in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `ice_adapter_new()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the iceadapternew function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...

CLSA-2025-1762540366 rsync: Fix of CVE-2016-9840

CVE-2016-9840: fix improper pointer arithmetic in inftrees.c...

The vulnerabilities of the functions uprobe_dispatcher() and uretprobe_dispatcher() in the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the uprobedispatcher and uretprobedispatcher functions in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990332 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits If the offset + lengt...

The vulnerability of the netdev_alloc_skb_ipalign() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the netdevallocskbipalign function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a service failure...