Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: idpf: Error handling in the inittask during loading was fixed. If the inittask fails during driver loading, we end up with no vports and netdevs, effectively failing the entire process. In that state, a subsequent reset will resu...

CVE-2026-43430

A flaw was found in the Linux kernel's yurex USB driver. A race condition occurs during the device probing process, where internal descriptor data can be overwritten before proper initialization. This vulnerability could lead to data corruption or unexpected system behavior, impacting the stabili...

CVE-2026-43426 usb: renesas_usbhs: fix use-after-free in ISR during device removal

In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: fix use-after-free in ISR during device removal In usbhsremove, the driver frees resources including the pipe array while the interrupt handler usbhsinterrupt is still registered. If an interrupt fires after...

CVE-2026-43372 net: dsa: microchip: Fix error path in PTP IRQ setup

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Fix error path in PTP IRQ setup If requestthreadedirq fails during the PTP message IRQ setup, the newly created IRQ mapping is never disposed. Indeed, the kszptpirqsetup's error path only frees the mappings...

USN-8258-1: Linux kernel (Azure) vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

CVE-2026-43082

CVE-2026-43082 affects the Linux kernel net: txgbe component. The issue arises from how property_entry lists are terminated: the driver allocated exactly the number of entries used and did not reserve space for the terminating empty entry. The fix updates the struct definition of property_entry t...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the TMU device driver managing power state and clocking within the context of original spinlocks,...

The vulnerability of the md_bitmap_resize() function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mdbitmapresize function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

EUVD-2026-24849

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue UAF There is a teardown order issue in the driver. The SPI controller is registered using devmspiregistercontroller, which delays unregistration of the SPI controller until after the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013665 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix memory leak in vfioap device driver The device release callback function invoke...

USN-8184-1: Linux kernel (Real-time) vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

The vulnerability of the fsi_spi_transfer_data() function in the drivers/spi/spi-fsi.c module of the Linux kernel’s SPI device support driver allows a attacker to cause a service failure.

The vulnerability of the fsispitransferdata function in the drivers/spi/spi-fsi.c module of the Linux kernel’s SPI device support driver is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Distros Unpatched Vulnerability : CVE-2026-23446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: aqc111: Do not perform PM inside suspend callback syzbot reports task hung in rpmresume This is caused by aqc111suspend calling the PM variant of its...

The vulnerability of the pci_iov_scan_device() function in the drivers/pci/iov.c module of the Linux operating system’s device support driver allows a hacker to cause a service failure.

The vulnerability of the pciiovscandevice function in the drivers/pci/iov.c module of the Linux operating system’s device support driver relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pcie_bwnotif_probe() function in the drivers/pci/pcie/bwctrl.c module of the Linux operating system’s device support driver allows a hacker to trigger a service failure.

The vulnerability of the pciebwnotifprobe function in the drivers/pci/pcie/bwctrl.c file of the Linux operating system’s device support driver module is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the try_smi_init() function in the drivers/char/ipmi/ipmi_si_intf.c driver for Linux’s alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the trysmiinit function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s character device driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of...

The vulnerability of the __bch_btree_node_alloc() function in the drivers/md/bcache/btree.c module of the Linux operating system’s device driver framework for multiple devices (such as RAID and LVM) allows a attacker to cause a service failure.

The vulnerability of the bchbtreenodealloc function in the drivers/md/bcache/btree.c module of the Linux device driver framework for multiple devices such as RAID and LVM is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gadgetBind() function in the drivers/usb/gadget/legacy/raw_gadget.c file of the Linux kernel’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the gadgetBind function in the drivers/usb/gadget/legacy/rawgadget.c file of the Linux USB device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the del_mtd_device() function in the drivers/mtd/mtdcore.c file of the MTD memory driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the delmtddevice function in the drivers/mtd/mtdcore.c file of the MTD memory driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...