Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent lpfcdebugfslockstatwrite buffer overflow A static code analysis tool identified the possibility of buffer overflow when using copyfromuser for a debugfs entry. Currently, it is possible that copyfromuser copie...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Lag – Check for LAG devices before creating debugfs. The function mlx5lagdevaddmdev may return 0 success even when an error occurs, but this error is handled gracefully. As a result, the initialization process continues...

CVE-2026-90209

A flaw was found in the Linux kernel's s390/debug component. A local user could trigger a deadlock by unregistering an s390dbf debug area while one of its associated debugfs files is being written to. This can lead to a system hang, resulting in a Denial of Service DoS...

CVE-2026-90085

A flaw was found in the Linux kernel's octeontx2-af driver. The rvudbgnixtmtreedisplay function, responsible for displaying NIX TM tree debug information, attempts to dereference a pointer without verifying if the associated context has been allocated. A local attacker can trigger a kernel crash...

AZL-106149 CVE-2026-98200 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: hwmon: hp-wmi-sensors Fix use-after-free in fungibleshow nsensor-currentstate is dynamically replaced as the sensor's state changes. updatenumericsensorfromwobj does this by freeing the old string and installing a new one: if...

CVE-2026-98200

The Linux kernel contains a use-after-free vulnerability in the hwmon (hp-wmi-sensors) component. The issue occurs because fungible_show() dereferences the nsensor->current_state pointer without holding state->lock, while the update_numeric_sensor_from_wobj() function frees and replaces tha...

EUVD-2026-93128

In the Linux kernel, the following vulnerability has been resolved: hwmon: hp-wmi-sensors Fix use-after-free in fungibleshow nsensor-currentstate is dynamically replaced as the sensor's state changes. updatenumericsensorfromwobj does this by freeing the old string and installing a new one: if...

CVE-2026-98200 hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()

In the Linux kernel, the following vulnerability has been resolved: hwmon: hp-wmi-sensors Fix use-after-free in fungibleshow nsensor-currentstate is dynamically replaced as the sensor's state changes. updatenumericsensorfromwobj does this by freeing the old string and installing a new one: if...

CVE-2026-98200: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: hp-wmi-sensors Fix use-after-free in fungibleshow nsensor-currentstate is dynamically replaced as the sensor's state changes. updatenumericsensorfromwobj does this by freeing the old string and installing a new one: if...

PT-2026-106529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fungible show function within the hp-wmi-sensors module. The nsensor-current state pointer is dynamically updated in update numeric sensor from wobj ...

CVE-2026-90219

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access cxgb4 module. When an RDMA device registration fails, the debugfs entries, which are used for debugging, are not properly deallocated. This oversight can lead to a resource leak, where these entries persist in memory even aft...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: crypto: hisilicon/debugfs – Fixed the issue with the uninit process of debugfs. During the zip probe process, a failure in debugfs does not stop the probe. When the initialization of debugfs fails, jumping to the error branch...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Remove the station if connection preparation fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD state. In this case, we must remove the station, as it is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - net: bonding: Fixed a NULL dereference in bonddebugrlbhashshow. - rlbclearslave intentionally keeps RLB hash-table entries on the rxhashtblusedhead list with the slave set to NULL when no replacement slave is available...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: Gadget: pxa25xudc: fixed a memory leak that occurred when using debugfslookup. When calling debugfslookup, the result must be processed by calling dput; otherwise, a memory leak will occur over time. To simplify things, simp...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: kernel/failfunction: fixed a memory leak that occurred when using debugfslookup. When calling debugfslookup, the result must also contain a call to dput; otherwise, a memory leak will occur over time. To simplify things, simply...

Astra Linux – Vulnerability in Linux 5.10

In the dplinksettingswrite function in the file drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c in the Linux kernel, up to version 5.14.14, there is a vulnerability that allows for a heap-based buffer overflow by an attacker. This vulnerability arises because the attacker can write a strin...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: dwc3 – A memory leak was fixed by using debugfslookup. When calling debugfslookup, the result must also have dput called upon it; otherwise, memory will leak over time. To simplify this, simply call debugfslookupandremove,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: Wil6210: debugfs: fixed the use of uninitialized variables in wilwritefilewmi Commit 7a4836560a61 replaces the simplewritetobuffer function with memdupuser, but it forgets to change the value returned by the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hcievent: Fixed an UAF Use-After-Free issue in the LE list during reset operations. The hciccreset function clears the LE accept and resolve lists without acquiring hdev-lock. Other command-complete handlers update...