Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix route with nexthop object delete warning The FRR team encountered a kernel warning1 while deleting routes2. This issue occurred when attempting to delete a route that points to a nexthop ID without specifying the...

Astra Linux – Vulnerability in Linux

In the Linux kernel before version 5.11.14, there is a use-after-free issue in the cipsov4genopt module, located in net/ipv4/cipsoipv4.c. This issue arises due to improper handling of the CIPSO and CALIPSO reference counts related to DOI definitions. As a result, an arbitrary value is written to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/ip6tunnel: Prevents perpetual tunnel growth. Similar to the ipv4tunnel case, the ipv6 version also updates dev-neededheadroom. While the growth of tunnel headroom adjustment in commit 5ae1e9922bbd “net: iptunnel: prevent...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipvs: fixed the NULL pointer dereference in the route error path of ipv4 null-ptr-deref. The IPv4 code path in ipvsgetoutrt calls dstlinkfailure, without ensuring that skb-dev is set. This leads to a NULL pointer dereference in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Net: Fixing segmentation issues with forwarding fraglists for GRO packets. This patch improves the handling of GSO segmentation by properly checking the SKBGSODODGY flag for GSO packets with a fraglist. This addresses low...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks When ESN is enabled, AH allocates its temporary auth/ICV layout differently: the async ahash setup appends a 4-byte seqhi slot before the ICV or authdata area, but the async...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfrm: ESP: restoring the combined single-frag-length gate. The ESP fast path appends the trailer in espoutputhead before espoutputtail allocates the destination page frag. Currently, the head-side gate checks skb-datalen and tail...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfree; if iphlen = sizeofiph / Fix up saddr, totlen, id, csum, transportheader / However, it does not reject packets where ihl =...

DEBIAN-CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

AZL-108243 CVE-2026-99999 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999

The Linux kernel contains a vulnerability in the IPv4 stack where the skb_checksum_help() function fails to validate the csum_start metadata before completing a checksum. This allows a packet with malformed metadata to cause the kernel to perform an out-of-bounds memory write , potentially corrup...

CVE-2026-99999 ipv4: validate checksum_start before completing checksum

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

EUVD-2026-102044

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999 ipv4: validate checksum_start before completing checksum

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period tcpv4synrecvsock transfers ownership of ireq-ireqopt to the child socket newinet-inetopt without copying it. Another cpu can concurrently process a retransmitted SYN for th...

CVE-2026-98432

A use-after-free vulnerability exists in the Linux kernel IPv4 networking subsystem due to a race condition during the concurrent processing of retransmitted TCP connection requests or socket migrations. The flaw occurs because tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to a ...

CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period tcpv4synrecvsock transfers ownership of ireq-ireqopt to the child socket newinet-inetopt without copying it. Another cpu can concurrently process a retransmitted SYN for th...

CVE-2026-98432

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period tcpv4synrecvsock transfers ownership of ireq-ireqopt to the child socket newinet-inetopt without copying it. Another cpu can concurrently process a retransmitted SYN for th...