USN-9018-1 linux, linux-aws, linux-gcp, linux-ibm, linux-oem-7.0, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file systems library; - Stream parser; - ARM64 architecture; - PowerPC architecture; - RISC-V architecture;...

USN-8960-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: rbd: fix null-ptr-deref when deviceadddisk fails dorbdadd publishes the device via deviceadd before calling deviceadddisk. If deviceadddisk fails after deviceadd succeeds, the error path directly calls rbdfreedisk and subsequentl...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: jbd2: fixed a deadlock in jbd2journalcancelrevoke The commit f76d4c28a46a “fs/jbd2: use sleeping version of findgetblock” changed jbd2journalcancelrevoke to use findgetblocknonatomic, which holds the folio lock instead of...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nullblk: fix null-ptr-dereference while configuring ‘power’ and ‘submitqueues’ Writing ‘power’ and ‘submitqueues’ concurrently will trigger a kernel panic: Test script: modprobe nullblk nrdevices=0 mkdir -p...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: nbd: call genlunregisterfamily first in nbdcleanup Otherwise, there may be a race condition between module removal and the handling of netlink commands, which can lead to the oops as shown below: BUG: kernel NULL pointer...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nbd: The issue of task hanging when the signal interrupt nbdstartdeviceioctl occurs has been fixed. The following program is a simplified version of the reproducer function: c int mainvoid int sv2, fd; if socketpairAFUNIX,...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in the nullvalidateconf and return an error for NULLQRQ since we do not allow legacy I/O paths. Without this patch, OOPs occur when queue...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: nbd: fix io hung while disconnecting device In our tests, “qemu-nbd” triggers an io hung: INFO: task qemu-nbd:11445 blocked for more than 368 seconds. Not tainted 5.18.0-rc3-next-20220422-00003-g2176915513ca 884 “echo 0...

Astra Linux – vulnerability in nbd

In nbd-server in nbd prior to version 3.24, there is a stack-based buffer overflow. An attacker can trigger a buffer overflow in the parsing of the name field by sending a crafted NBDOPTINFO or NBDOPTGO message containing a large value as the length of the name...

Astra Linux – vulnerability in nbd

In nbd-server in nbd prior to version 3.24, there is an integer overflow that leads to a heap-based buffer overflow. A value of 0xffffffff in the name length field causes a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue affects the NBDOPTINF...

Astra Linux – Vulnerability in Linux

In the rbd block device driver located in drivers/block/rbd.c within the Linux kernel, up to version 5.8.9, incomplete permission checks were used for accessing rbd devices. This could have been exploited by local attackers to map or unmap rbd block devices, specifically the CID-f44d04e696fe devi...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in biotruncate biotruncate clears the buffer outside of the last block of bdev; however, the current biotruncate uses the wrong page offset. As a result, it may return uninitialized data. This occurs when...

Astra Linux – vulnerability in util-linux

A flaw was found in the libblkid library within util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be...

Astra Linux – vulnerability in qemu

A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs when processing read/write ioport commands if the selected floppy drive is not initialized as a block device. This flaw enables a privileged guest user to crash the QEMU process on the host, leading t...

CVE-2026-90180

A flaw was found in the Linux kernel's mtip32xx block device driver. A local user with access to an already open block device could exploit a synchronization issue between ioctl handlers and device removal. This could lead to a use-after-free vulnerability, where the system attempts to access...

EulerOS 2.0 SP11 : util-linux (EulerOS-SA-2026-4384)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition...

EulerOS 2.0 SP15 : util-linux (EulerOS-SA-2026-3956)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition...

[SECURITY] Fedora 45 Update: libnbd-1.25.7-3.fc45

NBD =E2=80=94 Network Block Device =E2=80=94 is a protocol for accessing Bloc k Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and asynchronous APIs, both for ease of...

CVE-2026-97902

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by initiating nested filesystem freeze and thaw operations. An incorrect error code returned during nested thaw requests causes the kernel to retain an elevated freeze counter on the underlying block device...