Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ARM: cns3xxx: Fixed a refcount leak in cns3xxxinit. offindcompatiblenode returns a node pointer with a refcount incremented. We should use ofnodeput on it after processing. Add the missing ofnodeput call to avoid the refcount...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989895 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: cns3xxx: Fix refcount leak in cns3xxxinit offindcompatiblenode returns a node pointer with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986943)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986943 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: cns3xxx: Fix refcount leak in cns3xxxinit offindcompatiblenode returns a node pointer with...

EUVD-2022-54556

Malicious code in bioql PyPI...

SUSE CVE-2022-49677

In the Linux kernel, the following vulnerability has been resolved: ARM: cns3xxx: Fix refcount leak in cns3xxxinit offindcompatiblenode returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

DEBIAN-CVE-2022-49677

In the Linux kernel, the following vulnerability has been resolved: ARM: cns3xxx: Fix refcount leak in cns3xxxinit offindcompatiblenode returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2022-49677

In the Linux kernel, the following vulnerability has been resolved: ARM: cns3xxx: Fix refcount leak in cns3xxxinit offindcompatiblenode returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

UBUNTU-CVE-2022-49677

In the Linux kernel, the following vulnerability has been resolved: ARM: cns3xxx: Fix refcount leak in cns3xxxinit offindcompatiblenode returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2022-49677

In CVE-2022-49677, the Linux kernel ARM CNS3xxx codefix resolves a refcount leak in cns3xxx_init. The issue arises because of_find_compatible_node() returns a node pointer with its refcount incremented, and the patch adds a call to of_node_put() when finished to avoid leaking references. This vul...

GSD-2022-1004933 ARM: cns3xxx: Fix refcount leak in cns3xxx_init

ARM: cns3xxx: Fix refcount leak in cns3xxxinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.321 by commit...

GSD-2022-1004883 ARM: cns3xxx: Fix refcount leak in cns3xxx_init

ARM: cns3xxx: Fix refcount leak in cns3xxxinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.286 by commit...

GSD-2022-1004734 ARM: cns3xxx: Fix refcount leak in cns3xxx_init

ARM: cns3xxx: Fix refcount leak in cns3xxxinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.202 by commit...

GSD-2022-1004615 ARM: cns3xxx: Fix refcount leak in cns3xxx_init

ARM: cns3xxx: Fix refcount leak in cns3xxxinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit...

GSD-2022-1004452 ARM: cns3xxx: Fix refcount leak in cns3xxx_init

ARM: cns3xxx: Fix refcount leak in cns3xxxinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...