Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fixed a potential use-after-free in hix5hd2rx. The skb is passed to npapigroreceive, which may free it. After calling this function, dereferencing the skb may trigger a use-after-free...

CVE-2026-41516

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA PKCS1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver...

CVE-2026-41516

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA PKCS1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver...

CVE-2026-41516

OP-TEE (Trusted Execution Environment for Arm Cortex-A TrustZone) contains a vulnerability in the Hisilicon HPRE PKCS#1 v1.5 RSA decryption path. From version 4.5.0 up to, but not including, 4.11.0, the RSA PKCS#1 v1.5 decryption implementation uses non-constant-time memcmp() for label hash verif...

CVE-2026-41514 OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013756 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/hpre - fix resource leak in remove process In hpreremove, when the disable...

The vulnerability of the qm_get_qos_value() function in the drivers/crypto/hisilicon/qm.c module of the Linux kernel cryptographic accelerator driver allows a hacker to cause a service failure.

The vulnerability of the qmgetqosvalue function in the drivers/crypto/hisilicon/qm.c module of the Linux kernel’s cryptographic accelerator driver is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a system failure...

EUVD-2025-32774

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: Don't migrate perf to the CPU going to teardown The driver needs to migrate the perf context if the current using CPU going to teardown. By the time calling the cpuhp::teardown callback the cpuonlinemask hasn'...

hisi_acc_vfio_pci: fix XQE dma address error

...

The vulnerability of the smp_processor_id() function in the drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smpprocessorid function in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c module of the Linux operating system is related to the assignment of the NUL address value due to incorrect loading of drivers in the guest operating system. Exploiting this vulnerability can allow...

Vulnerability of the hclgevf_send_mbx_msg() function (drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_mbx.c) in the Linux operating system’s Hisilicon HNS3 network adapter driver, allowing a hacker to gain enhanced privileges

The vulnerability of the hclgevfsendmbxmsg function drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevfmbx.c in the Linux operating system’s network adapter driver for Hisilicon HNS3 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase...

SUSE CVE-2023-52859

In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhpstateremoveinstance to call uncore pmu offline callback, whi...