CVE-2026-77467

The photo-management tool Lychee (prior to version 7.7.0 ) is vulnerable to a denial-of-service condition due to an uncontrolled resource consumption flaw in the ImagickHandler::loadPdf() function. When processing PDFs via ImageMagick and Ghostscript, the application fails to apply an effective p...

Mattermost resource management error vulnerability

Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.9.1 and earlier of 11.9.x series, 11.8.5 and earlier of 11.8.x series, and 11.7.10 and earlier of 11.7.x series have a resource management vulnerability. This vulnerability arises from failing to limit the number and size of mentionkey...

Bytedeco JavaCV numerical error vulnerability

Bytedeco JavaCV versions prior to 1.5.14 have a numerical error vulnerability. This vulnerability stems from IPCameraFrameGrabber not checking for overflow or limiting the Content-Length when doubling the 32-bit buffer capacity. Malicious camera endpoints or tampered plaintext streams can return ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: padata: The CPU offline callback is moved to the ONLINE section to allow for failures. syzbot reported the following warning: DEAD callback error for CPU1 WARNING: kernel/cpu.c:1463 at cpudown+0x759/0x1020 kernel/cpu.c:1463, CPU0...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: arm64: Errata: Mitigate TLBI errata on various Arm CPUs Several CPUs developed by Arm suffer from errata where a broadcast TLBI;DSB sequence may complete before the global observation of writes, which are translated by an affecte...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: rcutorture: Fix ksoftirqd boosting timing and iteration The RCU priority boosting can fail in two situations: 1 If nrcpus maxcpus, meaning if the total number of CPUs is higher than those brought online at boot, then tortureonoff...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: BPF: Fixed a memory leak in the LRU and LRUPERCPU hash maps The LRU and LRUPERCPU maps allocate a new element during updates, before locking the target hash table bucket. Immediately afterwards, the maps attempt to lock the bucke...

Astra Linux – vulnerability in linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ARM: 9381/1: kasan: clear stale stack poison We have identified an out-of-bounds crash below: 33.452494 ================================================================== 33.453513 BUG: KASAN: stack-out-of-bounds in...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Thermal: intelpowerclamp: Use getcpu instead of smpprocessorid to avoid crashes. When CPU 0 is offline and intelpowerclamp is used to simulate idle state, it causes a kernel bug: Bug: Using smpprocessorid in preemptible 000000...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a flaw in the MIFF decoder allowed a malicious file to create an infinite loop, leading to CPU exhaustion. Versions 7.1.2.23 and 6.9.13-48 have fixed this issue...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: hwmon: coretemp Fixed out-of-bounds memory access. Fixed a bug where pdata-cpumap was set before the out-of-bounds check. This issue may occur on systems with more than 128 cores per package...

Astra Linux – vulnerability in linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: riscv: prevent ptregs corruption for secondary idle threads The top of the kernel thread stack should be reserved for ptregs. However, this is not the case for the idle threads of the secondary boot harts. Their stacks overlap wi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ice: arfs: fixed a use-after-free when freeing @rxcpurmap The CI testing bots triggered the following error message: 718.203054 BUG: KASAN: use-after-free in freeirqcpurmap+0x53/0x80 718.206349 Read of size 4 at addr...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: archtopology: Fix incorrect error check in topologyparsecpucapacity The incorrect usage of PTRERRORZERO in topologyparsecpucapacity causes the code to proceed with NULL clock pointers. Currently, the logic uses !PTRERRORZEROcpucl...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fixed a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar to the following when showing /proc/cpuinfo. This issue...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix call trace observed during I/O with CMF enabled The following issue was observed when CMF was enabled: BUG: using smpprocessorid in preemptible code: systemd-udevd/31711 kernel: caller is...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Networks: DSA: QCA8K: resetting the CPU port when the MTU changes. It was discovered that the documentation lacks a fundamental detail regarding how to correctly change the MAXFRAMESIZE of the switch. In fact, if the MAXFRAMESIZE...

Astra Linux – vulnerability in qemu

A infinite loop flaw was found in the e1000 NIC emulator within QEMU. This issue arises when processing transmit tx descriptors in processtxdesc, particularly when various descriptor fields are initialized with invalid values. This flaw enables a guest to consume CPU cycles on the host, leading t...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV-ES intra-host migration if vCPU creation is in progress Migrations of SEV-ES state are rejected if either the source or destination VM is actively creating a vCPU. This occurs when the kvmvmioctlcreatevcpu...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Fixed a kernel panic that occurred when loading the driver. After loading the amd-pstate-ut driver, the functions amdpstateutcheckperf and amdpstateutcheckfreq use cpufreqcpuget to obtain the CPU’s policy...