Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: A buffer overflow has been fixed in the liootargetnaclinfoshow function. The function liootargetnaclinfoshow uses sprintf within a loop to print details for each iSCSI connection in a session, without checkin...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fixed a NULL pointer dereferencing issue in smb2getinfofilesystem. If share is provided, share-path will be NULL, which can lead to a NULL pointer dereferencing issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15, and Linux 6.1

An integer overflow flaw was discovered in the Linux kernel. This issue causes the kernel to allocate skbsharedinfo in the user space, which can be exploited in systems without SMAP protection, as skbsharedinfo contains references to function pointers...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: Fixed the ndiscrauseropt function to initialize the nduseroptpadX fields to zero, to prevent information leakage. When processing Router Advertisements with user options, the kernel generates an RTMNEWNDUSEROPT...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: cifs: A connection leak occurs when the tlink setup fails. If the tlink setup fails and connections are lost, then the refcnt leak occurs due to the cifsd kthread not exiting. Additionally, fscache information is also leaked...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: Replace BTRFSMAXEXTENTSIZE with fsinfo-maxextentsize. In a zoned filesystem, data writing is limited by maxzoneAppendSize. A large ordered extent is split according to the size of a bio. On the other hand, the number of...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ethtool: eeprom: fix null-deref on genlinfo in dump A similar fix, as described in commit 46cdedf2a0fa “ethtool: pse-pd: fix null-deref on genlinfo in dump“, is also required for the ethtool eeprom function...

Astra Linux – Vulnerability in Chromium

Before version 92.0.4515.131, using “after free” in the Page Info UI in Google Chrome allowed a remote attacker to potentially exploit heap corruption through physical access to the device...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: alsa-lib: alsa-lib-1.2.16.1-2.1.hum1 aarch64, x8664 alsa-lib-devel-1.2.16.1-2.1.hum1 aarch64, x8664 alsa-topology-1.2.16.1-2.1.hum1 noarch alsa-ucm-1.2.16.1-2.1.hum1 noarch...

kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done

A flaw was found in the Linux kernel. A remote attacker could exploit a use-after-free vulnerability in the Transparent Inter-Process Communication TIPC cryptographic decryption process. This flaw occurs when a network namespace, a mechanism for isolating network resources, is deallocated before ...

CVE-2026-90700

creationtimestamp| type| source ---|---|--- 2026-09-14 10:15:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ifo4z5eo3len3...

CVE-2025-50505

creationtimestamp| type| source ---|---|--- 2026-09-14 08:00:05+00:00| seen| Telegram/jSo3BLtji8WL8JzpoAsvn5ReNVyzlPYUOFO3u5ByovA 2026-09-15 00:00:25+00:00| published-proof-of-concept| Telegram/jSo3BLtji8WL8JzpoAsvn5ReNVyzlPYUOFO3u5ByovA 2026-09-18 14:00:04+00:00| published-proof-of-concept|...

CVE-2026-90682

A flaw was found in Matthias-Wandel jhead. This vulnerability, a heap-based buffer overflow, exists within the WebP EXIF Handler component, specifically in the ProcessGpsInfo function. A local attacker could exploit this by manipulating the TAGGPSLAT or TAGGPSLONG arguments. Successful exploitati...

CVE-2026-89709

creationtimestamp| type| source ---|---|--- 2026-09-14 07:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvhjyyvchj23...

CVE-2012-4431

creationtimestamp| type| source ---|---|--- 2026-09-14 07:00:04+00:00| published-proof-of-concept| Telegram/RatzSjoQ9KseL5t0Zsf6XBMC79XgMZEaYuLwoH6PmI9uE 2026-09-15 00:00:27+00:00| published-proof-of-concept| Telegram/RatzSjoQ9KseL5t0Zsf6XBMC79XgMZEaYuLwoH6PmI9uE...

Important: Red Hat Security Advisory: python-tornado security update

An update for python-tornado is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

CVE-2026-90618

creationtimestamp| type| source ---|---|--- 2026-09-14 04:18:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e5xqgx62uyt2x...

CVE-2026-88861

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:15+00:00| seen| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4 2026-09-15 00:00:21+00:00| published-proof-of-concept| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4...

CVE-2026-77771

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:12+00:00| seen| Telegram/LVlgDwbFSGH2dSS06nRHfzXTVGcYZJpOdIuQwz8F82lNw 2026-09-15 00:00:23+00:00| published-proof-of-concept| Telegram/LVlgDwbFSGH2dSS06nRHfzXTVGcYZJpOdIuQwz8F82lNw...

CVE-2021-33879

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:11+00:00| seen| Telegram/SWXpTbFDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM 2026-09-15 00:00:24+00:00| published-proof-of-concept| Telegram/SWXpTbFDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM...