Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Fixed a race condition related to bitfield writes in btrfsclearspaceinfofull. According to the memory-barriers.txt document regarding memory barrier ordering guarantees: - These guarantees do not apply to bitfields, as...

CVE-2026-64588

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring-ready On weakly-ordered architectures, the store to fiq-ops can be reordered past the store to ring-ready, allowing a CPU that sees ring-ready == true via fuseuringready to dispatch requests...

CVE-2026-64588 fuse-uring: fix data races on ring->ready

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring-ready On weakly-ordered architectures, the store to fiq-ops can be reordered past the store to ring-ready, allowing a CPU that sees ring-ready == true via fuseuringready to dispatch requests...

SUSE CVE-2026-64027

In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALID to VALID. I didn't realize that the flags are not stored atomically with the entry in XArray. There's still a race of reader observing ...

CVE-2026-64067

A flaw was found in the Linux kernel's netfs component. This vulnerability stems from missing memory barriers when the stream-subrequests list is accessed without locks. Specifically, functions that process read and write results, such as netfscollectreadresults and netfscollectwriteresults, acce...

Linux Distros Unpatched Vulnerability : CVE-2026-64067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix missing barriers when accessing stream-subrequests locklessly The list of subrequests attached to stream-subrequests is accessed without locks by...

Linux Distros Unpatched Vulnerability : CVE-2026-64027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALI...

CVE-2026-64067

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream-subrequests locklessly The list of subrequests attached to stream-subrequests is accessed without locks by netfscollectreadresults and netfscollectwriteresults, and then they acce...

CVE-2026-64067

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream-subrequests locklessly The list of subrequests attached to stream-subrequests is accessed without locks by netfscollectreadresults and netfscollectwriteresults, and then they acce...

CVE-2026-64067 netfs: Fix missing barriers when accessing stream->subrequests locklessly

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream-subrequests locklessly The list of subrequests attached to stream-subrequests is accessed without locks by netfscollectreadresults and netfscollectwriteresults, and then they acce...

CVE-2026-64067

The CVE-2026-64067 issue concerns the Linux kernel netfs component, where stream->subrequests was accessed without proper memory barriers. The vulnerability arises from lockless access to the list of subrequests, allowing race conditions when netfs_collect_read_results() and netfs_collect_writ...

CVE-2026-64057 afs: Fix the locking used by afs_get_link()

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the locking used by afsgetlink The afs filesystem in the kernel doesn't do locking correctly for symbolic links. There are a number of problems: 1 It doesn't do any locking around afsreadsingle to prevent races between...

EUVD-2026-45600

In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALID to VALID. I didn't realize that the flags are not stored atomically with the entry in XArray. There's still a race of reader observing ...

CVE-2026-64027 net: shaper: rework the VALID marking (again)

In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking again Recent commit changed the semantics from NOTVALID to VALID. I didn't realize that the flags are not stored atomically with the entry in XArray. There's still a race of reader observing ...

PT-2026-61374

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The afs filesystem in the kernel implements incorrect locking for symbolic links. This leads to several issues, including a lack of locking around the afs read single function, which can...

PT-2026-61384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the list of subrequests attached to stream-subrequests is accessed without locks by the functions netfs collect read results and netfs collec...

PT-2026-61344

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the network shaper component due to the non-atomic storage of flags within the XArray. A reader may observe a VALID mark for a slot but be interrupted before...

CVE-2025-58151

varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer. The...

CVE-2025-58151

CVE-2025-58151 affects varstored, a Xen/Xapi component that handles UEFI variables and maps guest memory to OVMF. The vulnerability arises from TOCTOU due to insufficient compiler barriers in the shared buffer, with exploitation depending on compiler-generated code, and the attacker potentially c...

Linux Distros Unpatched Vulnerability : CVE-2026-53008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ice: fix race condition in TX timestamp ring cleanup Fix a race condition between...