Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedidbgdonotrecovercmdread function invokes sprintf directly on a user pointer, which results into the crash. To fix this issue, use a small local stack buffer for sprintf...

CVE-2026-53165

In the Linux kernel, the following vulnerability has been resolved: iomap: avoid potential null folio-mapping deref during error reporting When a buffered read fails, iomapfinishfolioread reports the error with fserrorreportiofolio-mapping-host, .... This is called after ifs-readbytespending has...

CVE-2026-53165 iomap: avoid potential null folio->mapping deref during error reporting

In the Linux kernel, the following vulnerability has been resolved: iomap: avoid potential null folio-mapping deref during error reporting When a buffered read fails, iomapfinishfolioread reports the error with fserrorreportiofolio-mapping-host, .... This is called after ifs-readbytespending has...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iouring: Fixed a fget leak when the file system does not support nowait buffered reads. Heming reported a bug when using iouring for link-cp operations on ocfs2. 1 The following steps can reproduce this bug: mount -t ocfs2 /dev/v...

Linux kernel Network File System Buffer Overflow DoS

The vulnerability of the netfsreadtopagecache function in the fs/netfs/bufferedread.c module of the Linux kernel’s network file system support mechanism is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

EUVD-2025-31878

Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, Deno.FsFile.prototype.utime and Deno.FsFile.prototype.utimeSync are not limited by the permission model check --deny-write=./. It's possible to change to change the access atime and modification mtim...

UBUNTU-CVE-2023-53511

In the Linux kernel, the following vulnerability has been resolved: iouring: fix fget leak when fs don't support nowait buffered read Heming reported a BUG when using iouring doing link-cp on ocfs2. 1 Do the following steps can reproduce this BUG: mount -t ocfs2 /dev/vdc /mnt/ocfs2 cp testfile...

PT-2025-40218

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18 Description The Linux kernel contains an issue where a file descriptor leak occurs when using io uring with filesystems that do not support non-waiting buffered reads, such as ocfs2. This can happen during...

PT-2022-29095

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description The issue concerns the handling of Transparent Huge Pages THPs in the generic file buffered read function. It was introduced in version v5.12 and fixed in version v5.15.26. The actual impact...

PT-2022-29029

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description The issue concerns the handling of Transparent Huge Pages THPs in the generic file buffered read function. The actual impact and attack plausibility have not yet been proven. Recommendations...

OESA-2021-1060 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash.CVE-2017-9114 ...