Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: A bounds check was added before accessing EA entries. In ntfsealookup and ntfslistxattr, this ensures that there is sufficient space in the EA entry before accessing the nextentryoffset field of that EA entry...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock The commit 2d1f7b65f5de “dm cache policy smq: fix missing locks in invalidating cache blocks” added mq-lock around the destructive part of smqinvalidatemapping, but left...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: GPU: host1x – Fixed the return value check for iommumapsgtable The commit “iommu: returning the full error code from iommumapsgatomic” changed iommumapsgtable to return an ssizet value in error cases, instead of a sizet value ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Fixed an off-by-one error in the decoding of mapping pairs by validating bounds checks. In ntfsmappingpairsdecompress, attrend points to one byte past the end of the attribute record: attrend = u8 attr +...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dm-verity: fixed a possible NULL pointer dereferencing issue. Fixed a possible NULL pointer dereferencing in dmverityloadpinisbdevtrusted if the device does not have a table...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vdpa: Added a queue index attr to the vdpanlpolicy structure for checking nlattr lengths. The vdpanlpolicy structure is used to validate the nlattr during the parsing of incoming nlmsg messages. It ensures that the described...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: qca – fixed an issue where information was leaked when retrieving the board ID. A missing sanity check was added when retrieving the board ID to prevent the leakage of slab data when later requesting the firmware...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: added a bounds check in dfhgetparamsize The dfhgetparamsize function can return a parameter size that is larger than the feature region, because the loop’s bounds check is evaluated before increasing the size. If the E...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of the numdests header Before accessing the numdests field of the struct batadvtvlvmcasttracker, it was attempted to check whether there is enough space in the network header. However, instead of...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hciuart: added a missing NULL check in h5enqueue. Syzbot encountered a general protection fault in pmruntimeresume. The problem was due to a missing NULL check. hu-serdev can be NULL, and we should not blindly pass...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: s390/qeth: Check CAPNETADMIN for private ioctls. Gate the SIOCQETHADPSETSNMPCONTROL, SIOCQETHGETCARDTYPE, and SIOCQETHQUERYOAT ioctl commands with the CAPNETADMIN capability check, to ensure that unprivileged users cannot invo...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: nVMX: Moving the consistency check between vTPR and TPR Threshold to “normal” checks Moving the off-by-default consistency check for vmcs12.tprthreshold versus the virtual APIC vTPR to the “normal” control checks is...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: added a sanity check for gsm-receive in gsmreceivebuf A null pointer dereference can occur when attempting to access the “gsm-receive” function in gsmldreceivebuf. Currently, the code assumes that gsm-recieve is only...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm: Check that output polling is initialized before disabling it. In drmkmshelperpolldisable, check that output polling is initialized before disabling polling. If not, flag this as a warning. Additionally, in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: A memory leak was fixed in the parseleasestate function. The previous patch that added a bounds check for the create lease context introduced a memory leak. When the bounds check fails, the function returns NULL, without...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten the checks for cgroup storage cookies for prog arrays The fix contained in commit abad3d0bad72 “bpf: Fix oob access in cgroup local storage” is still incomplete. The compatibility check for prog arrays treats a progr...

CVE-2026-74595

A flaw was found in the Linux kernel's fscrypt component. When setting an encryption policy on an idmapped mount, the fscryptioctlsetpolicy function incorrectly performs an owner check. This vulnerability can lead to legitimate users being denied access to set encryption policies, while...

CVE-2026-56865

A flaw was found in golang.org/x/mod/sumdb/tlog. A malicious Go proxy GOPROXY could exploit this vulnerability by forging sumdb tiles. This allowed the proxy to bypass integrity checks and serve malicious module content to a local Go module cache, which would then go undetected by the transparenc...

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...