Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: afunix: Fixed a data race in unixdgrampeerwakeme. unixdgrampoll calls unixdgrampeerwakeme without ensuring that the other lock is held, and without checking whether the receive queue is full. In this case, we need to use...

PT-2026-72629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak occurs in the kernel when handling IEEE 802.15.4 packets. The issue arises because the pan id field of struct ieee802154 addr remains uninitialized when the address...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013382)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013382 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: Fix error handling for SOCKDGRAM in kcmsendmsg. syzkaller found a memory leak in kcmsendmsg,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001929 advisory. The irdarecvmsgdgram function in net/irda/afirda.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obta...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002118 advisory. The irdarecvmsgdgram function in net/irda/afirda.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obta...

CVE-2023-53825

In the Linux kernel, the following vulnerability has been resolved: kcm: Fix error handling for SOCKDGRAM in kcmsendmsg. syzkaller found a memory leak in kcmsendmsg, and commit c821a88bd720 "kcm: Fix memory leak in error path of kcmsendmsg" suppressed it by updating kcmtxmsghead-lastskb if partia...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989910)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989910 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Fix a data-race in unixdgrampeerwakeme. unixdgrampoll calls unixdgrampeerwakeme without...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987307 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Fix a data-race in unixdgrampeerwakeme. unixdgrampoll calls unixdgrampeerwakeme without...

SUSE CVE-2022-49344

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix a data-race in unixdgrampeerwakeme. unixdgrampoll calls unixdgrampeerwakeme without other's lock held and check if its receive queue is full. Here we need to use unixrecvqfulllockless instead of unixrecvqfull, otherwi...

DEBIAN-CVE-2024-57901

In the Linux kernel, the following vulnerability has been resolved: afpacket: fix vlangetprotocoldgram vs MSGPEEK Blamed commit forgot MSGPEEK case, allowing a crash 1 as found by syzbot. Rework vlangetprotocoldgram to not touch skb at all, so that it can be used from many cpus on the same skb. A...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of the MSGPEEK issue in the handling of the vlangetprotocoldgram function...

PT-2025-3626

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, specifically in the af packet module. The issue was caused by a forgotten case for MSG PEEK in the vlan get protocol dgram function,...

Important: kernel

Issue Overview: A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcpgetsockopt/tcpsetsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier...

Important: kernel

Issue Overview: A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcpgetsockopt/tcpsetsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier...

SUSE CVE-2013-3236

The vmcitransportdgramdequeue function in net/vmwvsock/vmcitransport.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

SUSE CVE-2013-7281

The dgramrecvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a 1 recvfrom, 2...

OESA-2022-2031 kernel security update

Security Fixes: A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6streamops/inet6dgramops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue...

UBUNTU-CVE-2022-3567

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6streamops/inet6dgramops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the...

PT-2022-31781

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description A data-race issue exists in the unix dgram peer wake me function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32109

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description A data-race issue exists in the unix dgram peer wake me function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...