Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fix null-ptr-deref in az6027i2cxfer Wei Chen reported a kernel bug as follows: General protection fault, likely for non-canonical addresses. KASAN: Nullptrderef within the range...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: anysee: fixed the null-ptr-deref in anyseemasterxfer. In anyseemasterxfer, msg is controlled by the user. When msgi.buf is null and msgi.len is zero, previous checks on msgi.buf will still be performed. Malicious data will...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920xi2cxfer ‘read’ is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920xread call fail...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: fix memory leak in dvbusbadapterinit Syzbot reports a memory leak in “dvbusbadapterinit”. The leak occurs because the current iteration’s adapter-priv is not accounted for and not freed in case of an error...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1760546935)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760546935 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fix null-ptr- deref in az6027i2cxfer W...

ROS-20260929-73-0151

The vulnerability of the dtv5100i2cmsg function in the drivers/media/usb/dvb-usb/dtv5100.c file of the Linux operating system’s multimedia device driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

ROS-20260925-73-0152

The vulnerability of the anyseemasterxfer function in the drivers/media/usb/dvb-usb-v2/anysee.c file of the Linux multimedia device driver framework involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0020

The vulnerability of the af9005i2cxfer function in the drivers/media/usb/dvb-usb/af9005.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0044

The vulnerability of the m920xi2cxfer function in the drivers/media/usb/dvb-usb/m920x.c file of the multimedia device driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013724 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: fix memory leak in dvbusbadapterinit Syzbot reports a memory leak in...

dw2102_i2c_transfer Heap Buffer Overflow DoS

The vulnerability of the dw2102i2ctransfer function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

m920x_i2c_xfer Heap Buffer Overflow DoS

The vulnerability of the m920xi2cxfer function in the drivers/media/usb/dvb-usb/m920x.c file of the multimedia device driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

drivers/media/usb/dvb-usb-v2/gl861.c Heap Buffer Overflow DoS

The vulnerability of the gl861i2cmasterxfer function in the drivers/media/usb/dvb-usb-v2/gl861.c file of the multimedia device driver for the Linux operating system is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

af9005_i2c_xfer Heap Buffer Overflow DoS

The vulnerability of the af9005i2cxfer function in the drivers/media/usb/dvb-usb/af9005.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2025-68819

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100i2cmsg rlen value is a user-controlled value, but dtv5100i2cmsg does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeofst-data, an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001508)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001508 advisory. drivers/media/usb/dvb-usb-v2/dvbusbcore.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIGVMAPSTACK option, which allows loc...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003693 advisory. A memory leak in the af9005identifystate function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of servi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002667)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002667 advisory. drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service general protection fault and system crash ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002673)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002673 advisory. drivers/media/usb/dvb-usb-v2/dvbusbcore.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIGVMAPSTACK option, which allows loc...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002814 advisory. drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIGVMAPSTACK option, which allows...