Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: MediTech; vcodec: Fixed the VP8 stateless decoder’s “smatch” warning. A “smatch” static checker warning was also fixed in vdecvp8reqif.c. This issue causes the kernel to crash when fb is set to NULL...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: A potential buffer overflow issue in doregisterframebuffer has been fixed. The current implementation may lead to buffer overflow when: 1. Unregistration creates NULL gaps in the registeredfb array; 2. All array slots beco...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: The issue was fixed by correcting fbsetvar to prevent a null-ptr dereference in fbvideomodetovar. If fbaddvideomode in fbsetvar fails to allocate memory for fbvideomode, it may lead to a null-ptr dereference in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fbcvthperiod In fbfindmodecvt, if mode-refresh happens to be 0x80000000, cvt.frefresh will become 0 when multiplied by 2 due to overflow. This value is then passed to fbcvthperiod, where...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: Added a check for the value “plane”. The function dispcovlsetup is not intended to work with the value OMAPDSSWB of the plane enum parameter. The value of this parameter is initialized in dssinitoverlays, and in th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fixed doregisterframebuffer to prevent null-ptr-deref in fbvideomodetovar. If fbaddvideomode in doregisterframebuffer fails to allocate memory for fbvideomode, it will later lead to a null-ptr dereference in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fixed an out-of-bounds write in fastimageblit. This issue occurs when a user-space program calls ioctl FBIOPUTCON2FBMAP by passing the console number and the frame buffer number. Ideally, this maps the console to the frame...

SUSE CVE-2026-23008

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix KMS with 3D on HW version 10 HW version 10 does not have GB Surfaces so there is no backing buffer for surface backed FBs. This would result in a nullptr dereference and crash the driver causing a black screen...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004902)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004902 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: arkfb: Check the size of screen before memsetio In the function arkfbsetpar, the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004890)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004890 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: s3fb: Check the size of screen before memsetio In the function s3fbsetpar, the valu...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41093)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41093 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid using null object of...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38215)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38215 advisory. - In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix doregisterframebuffer to...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46694)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46694 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47753)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47753 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix VP8 statele...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47754)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47754 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 multi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000756 advisory. Integer overflow in the fbmmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004073 advisory. A buffer over-read at the framebuffer layer in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001299 advisory. The udlfbmmap function in drivers/gpu/drm/udl/udlfb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing loc...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004471 advisory. A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004387 advisory. A buffer over-read at the framebuffer layer in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka...