Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mfd: qcom-spmi-pmic: Fix revid implementation The Qualcomm SPMI PMIC’s revid implementation is flawed in several ways. Firstly, it assumes that simply because a sibling base device has been registered, it is also bound to a drive...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: opp: Fix use-after-free in lazyopptables after probe deferral When devpmoppoffindiccpaths in allocateopptable returns -EPROBEDEFER, the opptable is freed again to wait until all interconnect paths become available. However, if th...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: SoundWire: Fix enumeration completion The SoundWire subsystem utilizes two completion structures that enable drivers to wait for SoundWire devices to be enumerated on the bus and initialized by their respective drivers. The code...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: tegra: fix sleep in atomic call When we set the dual-role port to Host mode, we observed the following splat: 167.057718 BUG: sleeping function called from invalid context at include/linux/sched/mm.h:229 167.057872...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroyworkqueue call There is a possible race condition use-after-free similar to the following: FREE | USE adf7242remove | adf7242channel canceldelayedworksync | destroyworkqueue 1 | adf7242cmdrx |...

Linux Distros Unpatched Vulnerability : CVE-2026-93083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind TX receiver mailbox setup failure mailboxchansetup can request an...

AZL-102300 CVE-2026-93083 affecting package kernel for versions less than 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind TX receiver mailbox setup failure mailboxchansetup can request an additional unidirectional TX receiver channel after successfully acquiring the primary channel. If that second request fails, the functio...

DEBIAN-CVE-2026-93083

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind TX receiver mailbox setup failure mailboxchansetup can request an additional unidirectional TX receiver channel after successfully acquiring the primary channel. If that second request fails, the functio...

DEBIAN-CVE-2026-93082

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind P2A receiver mailbox setup failure mailboxchansetup can request an additional P2A receiver channel after successfully acquiring the primary P2A channel. If that later request fails, the function returns...

CVE-2026-93082 firmware: arm_scmi: Unwind P2A receiver mailbox setup failure

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind P2A receiver mailbox setup failure mailboxchansetup can request an additional P2A receiver channel after successfully acquiring the primary P2A channel. If that later request fails, the function returns...

CVE-2026-93082

CVE-2026-93082 affects the arm_scmi firmware driver in the Linux kernel . The vulnerable function is mailbox_chan_setup() , which acquires a primary P2A mailbox channel and then attempts to request an additional P2A receiver channel. If the secondary request fails, the function returns the error ...

EUVD-2026-82192

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind P2A receiver mailbox setup failure mailboxchansetup can request an additional P2A receiver channel after successfully acquiring the primary P2A channel. If that later request fails, the function returns...

EUVD-2026-82193

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind TX receiver mailbox setup failure mailboxchansetup can request an additional unidirectional TX receiver channel after successfully acquiring the primary channel. If that second request fails, the functio...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTER are run concurrently, a race involving an associated action can occur. Let’s illustrate this with CPU0 running NEWTFILTER and CPU...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fixed a potential deadlock condition. The deadlock can occur due to a recursive lock acquisition of crostypecaltmodedata::mutex. The call chain is as follows: 1. crostypecaltmodework acquires the mutex. 2...

python3.14 security update

3.14.7-2 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 3.14.7-1 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 3.14.6-1 - Update to Python 3.14.6 Related: RHEL-227190...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100745 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: never defer requests during idmap lookup During v4 request compound arg decoding, some ops...

CVE-2026-63982

In the Linux kernel , a vulnerability exists in the net/sched subsystem related to the ethx:ingress -> ethy:egress -> ethx:ingress mirred loop . When mirred redirects to ingress, the loop state from the sched_mirred_dev array is lost due to packet deferral into the backlog and the clearing ...

EUVD-2026-45541

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Do not read uninitialized fragment address in airohadevxmit The transmit loop in airohadevxmit reads fragment address and length during its final iteration, when the loop index equals skbshinfoskb-nrfrags, at which...

CVE-2026-63982: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix ethx:ingress - ethy:egress - ethx:ingress mirred loop When mirred redirects to ingress from either ingress or egress the loop state from schedmirreddev array dev is lost because of 1 the packet deferral into the...