Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: In the acpiecsetup function, when ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, the EC is already initiated, and the address-space handler is installed using the struct acpiec pointer as the handler...

The vulnerability of the acpi_ecremove_query_handlers() function in the drivers/acpi/ec.c file of the ACPI configuration and power management extended interface driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the acpiecremovequeryhandlers function in the drivers/acpi/ec.c file of the ACPI configuration and power management extended interface driver for the Linux operating system is related to the race condition that occurs when a common resource is used. Exploiting this...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only add the LED to ledslist when it is fully ready. Before this change, the LED was added to ledslist before the ledinitcore function was called—that is, before ledclassdev.setbrightnesswork was initialized. Thi...

PT-2026-6171

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel's LED class initialization. Specifically, LEDs were being added to the leds list before the led init core function was called, leaving a windo...

CVE-2025-37781

CVE-2025-37781 affects the Linux kernel involving the i2c Cros EC tunnel. When i2c-cros-ec-tunnel and the EC driver are built-in, the EC parent device may not be found, causing a NULL pointer dereference. The issue can be reproduced by unbinding the controller driver and re-loading the i2c-cros-e...

UBUNTU-CVE-2016-6156

Race condition in the ecdeviceioctlxcmd function in drivers/platform/chrome/crosecdev.c in the Linux kernel before 4.7 allows local users to cause a denial of service out-of-bounds array access by changing a certain size value, aka a "double fetch" vulnerability...