Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fixed a duplicate endpoint issue by clearing the reserved bits in the descriptor. Syzbot has identified a bug in usbcore see the “Closes” section below. The bug is caused by our assumption that the reserved bits in the...

CVE-2026-27649

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the assumption that reserved bits are always 0 when parsing endpoint descriptors, which could lead to incorrectl...