Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: serial: caif: Fix use-after-free in caifSerial ldiscClose There is a use-after-free bug in caifSerial where handletx may access ser-tty after tty has been freed. The race condition occurs between ldiscClose and packet transmissio...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dm: removed the fake timeout to avoid leaking requests Since commit 15f73f5b3e59 "blk-mq: moved failure injection out of blkmqcompleterequest", drivers are responsible for calling blkshouldfaketimeout at appropriate code paths an...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fixed a reference leak in thermalofcmlookup. In thermalofcmlookup, trnp is obtained via ofparsephandle, but it is never released. The freedevicenode cleanup attribute is used to automatically release the node and fix...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: rpmsg: core: fixed a race condition in the driveroverrideshow function and used a core helper function. The driveroverrideshow function reads the driveroverride string without holding the devicelock. However, the store function...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Platform/x86: classmate-laptop: Added NULL pointer checks where necessary. In several places within the Classmate laptop driver, code that uses the accel object may execute before its address is stored in the driver’s data...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/imx/tve: fixed the probe device leak. Make sure to remove the reference to the DDC device during probe operations when there is a probe failure e.g., probe deferral, as well as during the driver unbinding process...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dmaengine: omap-dma: fixed the resource leak in error paths caused by dmapool. The dmapool created by dmapoolcreate is not destroyed when dmaasyncdeviceregister or ofdmacontrollerregister fails, resulting in a resource leak in...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fixed a race condition between rfkill and nciunregisterdevice. syzbot reported the issue below 0 without providing a reproduction guide. It was noted that the struct ncidev.cmdwq was destroyed before nciclosedevice was...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

Linux Distros Unpatched Vulnerability : CVE-2026-68375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized...

Linux Distros Unpatched Vulnerability : CVE-2026-68180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - intelth: fix MSC output device reference leak intelthoutputopen looks up the output device with busfinddevicebydevt, which returns the device with a reference...

Linux Distros Unpatched Vulnerability : CVE-2026-68359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: nzxt-smart2 Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputrepor...

Linux Distros Unpatched Vulnerability : CVE-2026-68374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: sysfs: add lock to bosdescriptorsread Add a lock to the function bosdescriptorsread. This function accesses udev-bos, which could be simultaneously...

Linux Distros Unpatched Vulnerability : CVE-2026-68333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpaa2-switch: put MAC endpoint device on disconnect fslmcgetendpoint returns the MAC endpoint device with a reference taken through devicefindchild. The switch...

Linux Distros Unpatched Vulnerability : CVE-2026-68175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix resource leak on mmiotrace tracepipe close The mmiotrace tracer was added May 12th 2008. At that time, resources created in pipeopen could not be...

Linux Distros Unpatched Vulnerability : CVE-2026-68147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fscrypt: Avoid dynamic allocation in fscryptgetdevices When a blkcryptokey starts being used or is evicted, fs/crypto/ calls fscryptgetdevices to get the...

Linux Distros Unpatched Vulnerability : CVE-2026-68132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - super: fix emergency thaw deadlock on frozen block devices dothawallcallback calls bdevthaw while holding sb-sumount exclusively. If the block device was frozen...

Linux Distros Unpatched Vulnerability : CVE-2026-68207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeede...

Linux Distros Unpatched Vulnerability : CVE-2026-68231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: airspy: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If...

Linux Distros Unpatched Vulnerability : CVE-2026-68382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously. If the final device put happens from a destroy...