Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: prevents corruption of pcp with SMP=n. The kernel test robot has reported the following issue: BUG: spinlock trylock failure on UP on CPU0, kcompactd0/28 Lock: 0xffff888807e35ef0, .magic: dead4ead, .owner:...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Fixed an issue where missing cleanup was performed after a getburstcount call failed. getburstcount may return -EBUSY when it times out. In such cases, st33zp24send returns directly without releasing the locality...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: Fixed a null dereference of srq-rq.queue after a resize failure. A NULL pointer dereference can occur in rxesrqchkattr when ibvmodifysrq is invoked twice in succession under certain error conditions. The first call m...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: power: supply: wm97xx: A NULL pointer dereferencing issue has been fixed in powersupplychanged. In probe, requestirq is called before allocating/registering a powersupply handle. If an interrupt is fired between the call to...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xfs: fixed issues with freemap adjustments when adding xattrs to leaf blocks. Both xfs/592 and xfs/794 fail this assertion in the leaf block freemap adjustment code after approximately 20 minutes of execution on my test VMs...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fixed the double dmabufunpin in the failure path. In ibumemdmabufgetpinnedwithdmadevice, the call to ibumemdmabufmappages may fail. If this occurs, the dmabuf is immediately unpinned, but the umemdmabuf-pinned flag...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF node leak on route allocation failure Make sure that the reference to the DMA master OF node is also removed during late route allocation failures...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skips the dev-iotlb flush for inaccessible PCIe devices without scalable mode. PCIe endpoints with ATS enabled and passed through to userspace e.g., QEMU, DPDK can cause a system hard lock when their link fails, eithe...

Linux Distros Unpatched Vulnerability : CVE-2026-68215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering...

ROS-20260810-73-0034

The vulnerability of the publickeyresponsesuccess function in the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the KTLS subsystem in the kernel of the FreeBSD operating system allows a hacker to cause a service failure.

The vulnerability of the KTLS subsystem in the kernel of the FreeBSD operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load. The KIQ ring is falsely marked as ready as ASIC...

ROS-20260810-73-0032

The vulnerability in libssh2 is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wan: wanxl: Only reset hardware after BAR mapping wanxlpciinitone stores the freshly allocated card in driver data before the PLX BAR is mapped. Several early...

Linux Distros Unpatched Vulnerability : CVE-2026-68131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rbd: Reset positive result codes to zero in object map update path In a reply message to an RBD request, a positive result code indicates a data payload, which ...

Linux Distros Unpatched Vulnerability : CVE-2026-68155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: Reject monmaps advertising zero monitors A message of type CEPHMSGMONMAP contains a monmap that is sent from a monitor to the client. This monmap...

Linux Distros Unpatched Vulnerability : CVE-2026-68185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling...

CVE-2026-19350 Dolibarr ERP TakePOS invoice.php fail authorization

A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is...

CVE-2026-19350

Dolibarr ERP TakePOS module vulnerability CVE-2026-19350 affects the function fail in htdocs/takepos/invoice.php. The issue enables manipulation that leads to missing authorization, with remote exploitation potential. A patch identified as 8992ce8704da947b6abe7b65a6fe59aed736bb81 is available; ap...

CVE-2026-68081

The CVE concerns KVM nVMX in the Linux kernel. The root cause is an open coded path that neglects to put vmcs12 pages when a nested VM-Enter fails due to invalid guest state during VMLAUNCH/VMRESUME, causing leaks of pinned pages and/or mappings if L1 retries. The issue is resolved in the Linux k...