Linux Distros Unpatched Vulnerability : CVE-2026-80563

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind The trigger debugfs file has a hand-rolled -write handler triggerwrite that...

CVE-2026-80563: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind The "trigger" debugfs file has a hand-rolled -write handler triggerwrite that dereferences the per-device gpiolapollpriv. The file is created with...

The vulnerability of the bonddebug_rlb_hash_show() function in the drivers/net/bonding/bonddebugfs.c file of the Linux kernel-based network device driver allows a hacker to cause a system failure.

The vulnerability of the bonddebugrlbhashshow function in the drivers/net/bonding/bonddebugfs.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: Fixed a NULL pointer dereferencing issue when removing debugfs. We now remove the debugfs entries of the device when unbinding the driver. This now causes a NULL-pointer dereferencing issue at the end of the module,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fixed the error code in iwlopmodedvmstart The error code should be preserved if iwlsetupdeferredwork fails. The current code returns ERRPTR0 which is NULL at this point. I believe that the missing error code could...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: block: fixed leakage of debugfs entries caused by blktrace. The commit 99d055b4fd4b “block: removed per-disk debugfs files in blkunregisterqueue” moves the blkTraceShutdown function to blkUnregisterQueue. This is safe if blktrace...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fixed a hard lockup issue when reading the rxmonitor from debugfs. During I/O operations and simultaneous reads of /sys/kernel/debug/lpfc/fnX/rxmonitor, a hard lockup similar to the call trace below may occur. The...

CVE-2026-74351

A flaw was found in the ocfs2 component of the Linux kernel. The lockingstate debugfs iterator incorrectly handles pointers to lock resource blocks LVB. When the original lock resource is freed while the iterator still holds a pointer to it, a use-after-free vulnerability occurs. This can lead to...

CVE-2026-74348

A flaw was found in the Linux kernel's OCFS2 Distributed Lock Manager DLM. A local user could exploit a use-after-free vulnerability in the lockingstate debugfs interface. This occurs because the debuglockresopen function does not correctly handle cases where a reference to a DLM context cannot b...

CVE-2026-72340

A flaw was found in the Linux kernel's Microchip VCAP driver. A race condition exists in the shared Super VCAP block, where independent locking of VCAP instances can lead to concurrent access issues. A local attacker with the ability to trigger concurrent operations, such as a full rule dump in...

Linux Distros Unpatched Vulnerability : CVE-2026-74351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: rebase copied fsdlm LVB pointers in lockingstate The lockingstate debugfs iterator snapshots struct ocfs2lockres by value under ocfs2dlmtrackinglock and...

Linux Distros Unpatched Vulnerability : CVE-2026-74348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2/dlm: require a ref for lockingstate debugfs open debuglockresopen copies inode-iprivate into struct debuglockres and debuglockresrelease later drops that...

Linux Distros Unpatched Vulnerability : CVE-2026-72340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent, yet they are locked independently. On sparx5 an...

SUSE CVE-2026-68153

In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardown cephdestroyclient tears down the monitor client before removing the per-client debugfs files. A concurrent read of the monmap debugfs file can enter monmapshow after cephmoncst...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100553 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs Why & How...

The vulnerability of the iccdebugfs_client_init() function in the drivers/interconnect/debugfs-client.c module of the Linux kernel’s interconnection driver allows a attacker to cause a service failure.

The vulnerability of the iccdebugfsclientinit function in the drivers/interconnect/debugfs-client.c file of the Linux kernel’s interconnection driver module relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099786 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs Why & How...

CVE-2026-74351

In the Linux kernel, the following vulnerability has been resolved: ocfs2: rebase copied fsdlm LVB pointers in lockingstate The lockingstate debugfs iterator snapshots struct ocfs2lockres by value under ocfs2dlmtrackinglock and later formats that copy in ocfs2dlmseqshow. That is fine for the inli...

CVE-2026-74348

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: require a ref for lockingstate debugfs open debuglockresopen copies inode-iprivate into struct debuglockres and debuglockresrelease later drops that pointer with dlmput. That only works if open successfully pins the...

CVE-2026-72340

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent, yet they are locked independently. On sparx5 and lan969x the IS0 and IS2 instances are backed by the same Super VCAP...