Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Fixed a slab-use-after-free issue caused by a dangling pointer dqipriv. When mounting ocfs2 and then remounting it as read-only, a slab-use-after-free occurs after the user uses the syscall to call ocfs2getnextid...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/nouveau: prime: fix ttmbodelayeddelete oops Fixed an oops in ttmbodelayeddelete that occurs due to a dangling pointer being referenced: Oops: General Protection Fault, likely for a non-canonical address 0x6b6b6b6b6b6b6b7b:...

kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call component. Improper handling of credential data during the decoding process can lead to a dangling pointer, a form of memory corruption. This issue may allow a remote attacker to cause a denial of service by triggering early...

kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call component. Improper handling of credential data during the decoding process can lead to a dangling pointer, a form of memory corruption. This issue may allow a remote attacker to cause a denial of service by triggering early...

CVE-2026-93192

A flaw was found in the Linux kernel's drm/v3d component. When the v3dfencecreate function fails within runjob callbacks, the queue-activejob is not properly cleared. This oversight leaves a dangling pointer, which could lead to memory corruption or a denial of service DoS condition...

Linux Distros Unpatched Vulnerability : CVE-2026-98383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The...

SUSE CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

DEBIAN-CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

CVE-2026-98383

In the Linux kernel , a vulnerability exists in the bpf subsystem where an LWT_SEG6LOCAL program can invalidate its cached SRH using bpf_lwt_seg6_adjust_srh() and subsequently call bpf_skb_pull_data(). This combination may cause bpf_skb_pull_data() to reallocate skb->head, leaving the per-CPU ...

PT-2026-108769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf component where an LWT SEG6LOCAL program can invalidate its cached Segment Routing Header SRH using the bpf lwt seg6 adjust srh function and subsequently call...

SUSE CVE-2026-98218

In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2catraddadapter stores atr-adapterchanid before i2caddadapter so that the I2C bus notifier can match child clients during registration. On failure the channel is freed but th...

CVE-2026-98283

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhvemulatetlbiealllpid kvmhvemulatetlbiealllpid iterates the nested-guest IDR and drops mmulock before calling kvmhvemulatetlbielpid, but does not hold a reference on the kvmnestedgues...

DEBIAN-CVE-2026-98218

In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2catraddadapter stores atr-adapterchanid before i2caddadapter so that the I2C bus notifier can match child clients during registration. On failure the channel is freed but th...

AZL-106197 CVE-2026-98218 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2catraddadapter stores atr-adapterchanid before i2caddadapter so that the I2C bus notifier can match child clients during registration. On failure the channel is freed but th...

CVE-2026-98218

In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2catraddadapter stores atr-adapterchanid before i2caddadapter so that the I2C bus notifier can match child clients during registration. On failure the channel is freed but th...

CVE-2026-98218

In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2catraddadapter stores atr-adapterchanid before i2caddadapter so that the I2C bus notifier can match child clients during registration. On failure the channel is freed but th...

EUVD-2026-93211

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhvemulatetlbiealllpid kvmhvemulatetlbiealllpid iterates the nested-guest IDR and drops mmulock before calling kvmhvemulatetlbielpid, but does not hold a reference on the kvmnestedgues...

CVE-2026-98218

The Linux kernel contains a vulnerability where the function i2c_atr_add_adapter() stores a pointer to atr->adapter[chan_id] before calling i2c_add_adapter(). If i2c_add_adapter() fails, the channel is freed, but the slot remains pointing at the freed memory . This situation can result in a us...