Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fixed potential out-of-bounds access due to an invalid rxstatus-rskeyix parameter. The rxstatus-rskeyix parameter is eventually passed to testbit, so we need to ensure that it is within the allowed range of the bitmap...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005503)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005503 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Use skbsetlength for resetting urb before resubmit Syzbot points out that skbtrim...

kernel: Linux kernel: ath9k_htc out-of-bounds access vulnerability

A flaw was found in the Linux kernel's ath9khtc component. This vulnerability allows a local attacker to cause a denial of service or potentially disclose sensitive information via passing untrusted data to testbit...

kernel: Linux kernel: ath9k_htc out-of-bounds access vulnerability

A flaw was found in the Linux kernel's ath9khtc component. This vulnerability allows a local attacker to cause a denial of service or potentially disclose sensitive information via passing untrusted data to testbit...

CLSA-2026-1768110920 kernel: Fix of 16 CVEs

crypto: lzo - Fix compression buffer overrun CVE-2025-38068 - wifi: brcmfmac: fix use-after-free when rescheduling brcmfbtcoexinfo work CVE-2025-39863 - NFSD: Protect against send buffer overflow in NFSv2 READ CVE-2022-43945 - tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. CVE-2025-40186 - can:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991171 advisory. In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix The rxstatus-rskeyix...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990824 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Use skbsetlength for resetting urb before resubmit Syzbot points out that skbtrim...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989499 advisory. In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix The rxstatus-rskeyix...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989655 advisory. In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix The rxstatus-rskeyix...

EUVD-2022-54726

In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix The "rxstatus-rskeyix" eventually gets passed to testbit so we need to ensure that it is within the bitmap. drivers/net/wireless/ath/ath9k/common.c:46...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987111 advisory. In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix uninit value bugs Syzbot reported 2 KMSAN bugs in ath9k. All of them are caused by...

EUVD-2025-19787

Malicious code in bioql PyPI...

EUVD-2022-54991

Malicious code in bioql PyPI...

CVE-2025-38157

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Abort software beacon handling if disabled A malicious USB device can send a WMISWBAEVENTID event from an ath9khtc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver...

UBUNTU-CVE-2025-38157

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Abort software beacon handling if disabled A malicious USB device can send a WMISWBAEVENTID event from an ath9khtc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver...

CVE-2025-38157

Affected software: Linux kernel driver ath9k_htc (wifi). Issue: when an adversarial USB device emits WMI_SWBA_EVENTID before beaconing is enabled, ath9k_htc_swba() may trigger a device-by-zero error causing a crash or out-of-bounds read. Root cause: improper handling of software beacon processing...

CVE-2025-38157 wifi: ath9k_htc: Abort software beacon handling if disabled

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Abort software beacon handling if disabled A malicious USB device can send a WMISWBAEVENTID event from an ath9khtc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver...

CVE-2025-38157 wifi: ath9k_htc: Abort software beacon handling if disabled

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Abort software beacon handling if disabled A malicious USB device can send a WMISWBAEVENTID event from an ath9khtc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver...

Linux Distros Unpatched Vulnerability : CVE-2022-49503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix The rxstatus-rskeyix eventually gets passed to testbit so we need to ensure that it i...

SUSE CVE-2022-49503

In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix The "rxstatus-rskeyix" eventually gets passed to testbit so we need to ensure that it is within the bitmap. drivers/net/wireless/ath/ath9k/common.c:46...