CLSA-2023-1682604577 Fix of 54 CVEs

CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by modtimer Bionic update: upstream stable patchset 2022-03-04 LP: 1963717 // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets CVE-2022-36879 - xfrm: xfrmpolicy: fix a possible double xfrmpolsput in...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: net: hamradio: Fixed a memory leak in mkissclose. My local syzbot instance encountered a memory leak in mkissopen1. The issue arose from the missing freenetdev call in mkissclose. In mkissopen, netdevice is allocated and then...

Astra Linux – Vulnerability in Linux, Linux 5.10

A issue was discovered in the Linux kernel before version 5.16.5. There is a memory leak in the yamsiocdevprivate function in the drivers/net/hamradio/yam.c file...

Astra Linux – Vulnerability in Linux, Linux 5.10

A use-after-free vulnerability was discovered in the Linux kernel, specifically in the drivers/net/hamradio module. This flaw allows a local attacker with user privileges to cause a denial of service DOS condition when the mkiss or sixpack device is detached, resulting in premature reclamation of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100748 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099906)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099906 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly...

SUSE CVE-2026-53082

In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly skip bytes with TTY error flags. The while loop iterates through the flags buffer but never advances the data pointer cp, and passes...

net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf

...

CVE-2026-53082

A flaw was found in the 6pack hamradio driver within the Linux kernel. This vulnerability occurs because the system does not properly handle data with communication errors, causing it to process uninitialized information. An attacker with local access could potentially exploit this to gain...

Linux Distros Unpatched Vulnerability : CVE-2026-53082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly skip bytes with TTY error flags. The while loop iterates through...

CVE-2026-53082

In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly skip bytes with TTY error flags. The while loop iterates through the flags buffer but never advances the data pointer cp, and passes...

CVE-2026-53082

CVE-2026-53082 is a patch-level vulnerability resolved in the rootio-linux component. Connected OSV entries confirm patches across multiple distros: Root (Debian 12 and 11 variants) with multiple fixed versions, Root’s Ubuntu 22.04 release, and accompanying Debian/Ubuntu OSV advisories. In short,...

CVE-2026-53082 net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf

In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly skip bytes with TTY error flags. The while loop iterates through the flags buffer but never advances the data pointer cp, and passes...

CVE-2026-53082: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly skip bytes with TTY error flags. The while loop iterates through the flags buffer but never advances the data pointer cp, and passes...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001675 advisory. An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yamsiocdevprivate in drivers/net/hamradio/yam.c. Tenable has extracted the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001692)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001692 advisory. A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001694 advisory. A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device usin...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988776 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hamradio: fix memory leak in mkissclose My local syzbot instance hit memory leak in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414447 advisory. An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yamsiocdevprivate in drivers/net/hamradio/yam.c. Tenable has extracted the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414490 advisory. A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of...