The vulnerability of the functions system_call() and mckk_int_handler() in the arch/s390/kernel/entry.S module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the functions systemcall and mcckinthandler in the arch/s390/kernel/entry.S module of the Linux operating system’s kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260825-73-0039

The vulnerability of the evlistfreesyscalltpfields function in the tools/perf/builtin-trace.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rxrpc_process_event() function in the net/rxrpc/conn_event.c module allows for a session-based RxRPC kernel support on Linux systems, enabling a hacker to cause a service failure.

The vulnerability of the rxrpcprocessevent function in the net/rxrpc/connevent.c module, which is part of the RxRPC session support for Linux kernel, relates to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-81552

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper initialization in the Network component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded...

The vulnerabilities of the functions nv50_piorDestroy() and nv50_piorCreate() in the driver/gpu/drm/nouveau/dispnv50/disp.c file of the Nouveau driver for the Direct Rendering Infrastructure (DRI) of NVIDIA’s Linux kernel allow a malicious actor to cause a service failure.

The vulnerability of the functions nv50piordestroy and nv50piorcreate in the drivers/gpu/drm/nouveau/dispnv50/disp.c module of the Nouveau graphics driver for Linux operating systems is related to the lack of resource initialization. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the ESS protocol analyzer in Wireshark allows a hacker to cause a service failure.

The vulnerability of the ESS protocol analyzer used by Wireshark for analyzing computer network traffic is related to errors during initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the ppp_send_frame() function in the drivers/net/ppp/ppp_generic.c module of the Point-to-Point PPP protocol driver in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the pppsendframe function in the drivers/net/ppp/pppgeneric.c module of the Point-to-Point PPP protocol driver in the Linux operating system is related to the lack of resource initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Fix for crashes when mounting with quota enabled There is a reported crash when mounting ocfs2 with quota enabled. Stack Trace: RIP: 0010:ocfs2qinfolockresinit+0x44/0x50 ocfs2 Call Trace: ocfs2localreadinfo+0xb9/0x6f0 ocfs...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mlxsw: Minor fix for a potential memory leak in mlxswmlinecardsinit. The line cards array is not freed during the error path of mlxswmlinecardsinit, which could lead to a memory leak. This issue was addressed by freeing the array...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fixed a NULL pointer dereference in calctxv4l2initformats. In calctxv4l2initformats, devmkzalloc is assigned to ctx-activefmt, and there is a dereference of it afterward. This could lead to a NULL pointer...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: vlan: fixed an underflow issue related to the realdev refcnt. An error is injected before devholdrealdev in registervlandev, and the following testcase is executed: bash ip link add dev dummy1 type dummy ip link add name...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: f2fs: A fix was made to prevent race conditions during the fsyncentryslab access by multiple f2fs filesystem instances. As reported by syzbot, there is a use-after-free issue during f2fs recovery: A use-after-free occurs when...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Destroying the DMA pool on CLDMA during late initialization failure The function t7xxcldmalateinit creates mdctrl-gpddmapool before initializing the TX and RX rings. If any of these ring initializations fail, the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: mana: Initialize gdma queue ID to INVALIDQUEUEID. The managdcreatemanawqcq function leaves queue-id set to 0 from kzallocobj, until manacreatewqobj assigns the ID returned by the firmware. If the creation fails before that...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix for the hang during reboot/shutdown The recent commit 974578017fc1 “iavf: Add waiting so the port is initialized in remove” adds a wait-loop at the beginning of iavfremove, to ensure that port initialization is complete...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm: Check that output polling is initialized before disabling it. In drmkmshelperpolldisable, check that output polling is initialized before disabling polling. If not, flag this as a warning. Additionally, in...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: lockd: Other missing fields are set when unlocking files. The vfslockfile function expects that the struct filelock structure is fully initialized by the caller. If the flfile field is NULL after re-exporting NFSv3, an OOP err...

The vulnerability of the i2c/busses/i2c-riic.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the i2c/busses/i2c-riic.c component of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

Vulnerabilities of components of Linux operating system kernels, which allow attackers to cause service failures

The vulnerability of GVE components in Linux operating systems is related to the lack of initialization for resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the arm64/boot/dts/xilinx/zynqmp.dtsi component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the arm64/boot/dts/xilinx/zynqmp.dtsi component of the Linux operating system’s kernel is related to the absence of resource initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...