Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Added a check for a failure in memory allocation for rgbydata. In iacss3astatisticsallocate, there is no check on the allocation result of the rgbydata memory. If rgbydata is not successfully allocated, it may...

The vulnerability of the atomisp_s_parm() function in the drivers/staging/media/atomisp/pci/atomisp_ioctl.c driver for Intel Atom-based Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the atomispsparm function in the drivers/staging/media/atomisp/pci/atomispioctl.c driver for Intel Atom-based Linux operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-46205

A flaw was found in the Linux kernel's atomisp driver, located in the staging: media subsystem. This vulnerability involves the unsafe handling of private Input/Output Control IOCTL operations. While specific exploitation details are not provided, the presence of unsafe IOCTL handlers could...

CVE-2026-46205

In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Disallow all private IOCTLs Disallow all private IOCTLs. These aren't quite as safe as one could assume of IOCTL handlers; disable them for now. Instead of removing the code, return in the beginning of th...

PT-2026-44328

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the staging media atomisp component where private IOCTLs Input/Output Control are not sufficiently safe. To address this, private IOCTLs are disallowed by returning fr...

SUSE CVE-2025-38585

In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...

Vulnerability of the atomisp_alloc_css_stat_bufs() function in the drivers/staging/media/atomisp/pci/atomisp_ioctl.c module – This driver for Intel Atom-core devices in the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the atomispalloccssstatbufs function in the drivers/staging/media/atomisp/pci/atomispioctl.c module – The driver for Intel Atom-based devices in the Linux operating system is vulnerable to a vulnerability where memory previously released is re-released. Exploiting this...