Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: sched: Fixed out-of-bound access in uclamp. Util-clamp places tasks into different buckets based on their clamp values for performance reasons. However, the size of the buckets is currently computed using a rounding division, whi...

CVE-2026-93593

ArcadeDB before 26.9.1 fails to enforce security-group types ACL entries for TimeSeries types because the ACL resolver builds permissions from bucket IDs, but TimeSeries types do not own normal record buckets. An authenticated low-privilege user can read or insert TimeSeries samples despite...

CVE-2026-93593 ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permission

ArcadeDB before 26.9.1 fails to enforce security-group types ACL entries for TimeSeries types because the ACL resolver builds permissions from bucket IDs, but TimeSeries types do not own normal record buckets. An authenticated low-privilege user can read or insert TimeSeries samples despite...

AZL-100506 CVE-2026-89656 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from the decoded bucket id. A malformed map can therefore make one bucket...

CVE-2026-89656

In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from the decoded bucket id. A malformed map can therefore make one bucket...

PT-2026-90372

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libceph component where the crush decode function stores bucket data by array slot, but the mapper derives the per-bucket workspace index from the decoded bucket i...

CVE-2026-68154

The CVE-2026-68154 vulnerability affects the Linux kernel’s libceph component, where CRUSH map decoding accepts bucket type 0 (reserved for devices) can let a malformed map cause a negative bucket ID to index the OSD weight array, leading to denial of service. The issue is fixed by rejecting zero...

CVE-2026-68154: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The mapper relies on that invariant and uses type 0 to identify leaf devices. If crushdecode accepts a bucket with type 0, a malformed...

The vulnerability of the uclamp_bucket_id() function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the uclampbucketid function in the kernel/sched/core.c module related to the Linux operating system’s resource management support involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause...

SUSE CVE-2021-46993

In the Linux kernel, the following vulnerability has been resolved: sched: Fix out-of-bound access in uclamp Util-clamp places tasks in different buckets based on their clamp values for performance reasons. However, the size of buckets is currently computed using a rounding division, which can le...