Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fixed a UAF Use-after-Free in LED devices during unbinding. LED devices created by HD-audio codec drivers are registered using devmledclassdevregister, and they are associated with the HD-audio codec device...

CVE-2025-70520

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users. The lack of restrictions grants anyone the ability to view any device resources such as operational logs or perform diagnostic requests...

EUVD-2025-211051

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users. The lack of restrictions grants anyone the ability to view any device resources such as operational logs or perform diagnostic requests...

PT-2026-107527

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users. The lack of restrictions grants anyone the ability to view any device resources such as operational logs or perform diagnostic requests...

EUVD-2025-211047

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users. The lack of restrictions grants anyone the ability to view any device resources such as operational logs or perform diagnostic requests...

CVE-2025-70516: Missing Authentication for Critical Function

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users. The lack of restrictions grants anyone the ability to view any device resources such as operational logs or perform diagnostic requests...

CVE-2025-70516

The Fanvil x7a device, running firmware version 2.6.0.1182 , contains a vulnerability in its websocket handler due to a lack of proper authentication restrictions for sessionless users. This security flaw allows unauthenticated attackers to access various device resources, including operational l...

CVE-2025-70520

The Fanvil x7a device, running firmware version 2.6.0.1182 , contains a vulnerability in its websocket handler due to a lack of proper authentication restrictions against sessionless users. This security weakness allows any user to access sensitive device resources , including operational logs an...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-83801 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-83801 Source advisory: OSV:PYSEC-2026-4110...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-83801 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-83801 Source advisory: OSV:GHSA-56V6-2FHR-WXGQ...

CVE-2026-68227 media: cx231xx: fix devres lifetime

In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when...

CVE-2026-68227

The vulnerability CVE-2026-68227 affects the Linux kernel media: cx231xx USB video driver. The issue was that device-managed resources could outlive the USB interface, risking memory leaks when drivers are unbound (e.g., probe deferral or configuration changes) despite the device remaining connec...

SUSE CVE-2026-64583

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC driver registers its IRQ handler with devmrequestirq in bdcudcinit, so the IRQ is released by devm only after bdcremove returns. devm...

CVE-2026-64362

In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lgg15data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lgg15event and lgg15v2event do it on th...

CVE-2026-64473 vfio: Remove device debugfs before releasing devres

In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfscreatedevmseqfile store a devres allocated debugfsdevmentry as inode private data. vfiounregistergroupdev currently calls...

CVE-2026-64473 vfio: Remove device debugfs before releasing devres

In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfscreatedevmseqfile store a devres allocated debugfsdevmentry as inode private data. vfiounregistergroupdev currently calls...

Linux Distros Unpatched Vulnerability : CVE-2026-64463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +3 more potentially affected by CVE-2025-49143 via nautobot (>=2.0.0, <=2.4.5)

nautobot PYPI version =2.0.0, =2.0.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2025-49143 Source advisory: OSV:PYSEC-2026-1689...

nautobot-device-resources (1.0.0), nautobot-ssot (>=2.0.0, <=2.5.0) potentially affected by CVE-2024-34707 via nautobot (>=2.0.0, <=2.2.0)

nautobot PYPI version =2.0.0, =2.0.0, =2.5.0 Source cves: CVE-2024-34707 Source advisory: OSV:PYSEC-2026-1688...

nautobot-device-resources (1.0.0), nautobot-ssot (>=2.0.0, <=2.5.0) potentially affected by CVE-2024-32979 via nautobot (>=2.0.0, <=2.2.0)

nautobot PYPI version =2.0.0, =2.0.0, =2.5.0 Source cves: CVE-2024-32979 Source advisory: OSV:PYSEC-2026-1686...