Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: block: Do not revert the iterator for -EIOCBQUEUED. The blkdevreaditer function includes some unusual checks. For example, it checks whether the result is greater than or equal to zero before adjusting the position and count. Thi...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the proc subsystem, the same handling is used for checking proclseek as for procreaditer and others. Directly checking pde-procops-proclseek may lead to a Use-After-Value UAF in the rmmod scenario. This issue stems from a flaw...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bpf, sockmap: Fixed the deadlock caused by afunix iter The bpfiterunixseqshow function may cause a deadlock when locksockfast uses the fast path, and the iter function attempts to update the sockmap. This results in a deadlock...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: Fixed a use-after-free in printgraphfunctionflags during tracer switching. Kairui reported a UAF issue in printgraphfunctionflags during ftrace stress testing 1. This issue can be reproduced by putting a ‘mdelay10’ after...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: Fixed an uninitialized value in ocfs2filereaditer. Syzbot has reported the following KMSAN errors: BUG: KMSAN: Uninitialized value in ocfs2filereaditer+0x9a4/0xf80; ocfs2filereaditer+0x9a4/0xf80; ioread+0x8d4/0x20f0;...

PT-2026-105915

Summary Before tokenizing, selector iter trims leading/trailing whitespace and comments by running two regexes over the whole raw selector with .search. The trailing one, RE WS END = re.compiler'WSC$', is anchored only at the end $, not the start. Because .search retries the pattern at every...

PT-2026-99257

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the cgroup subsystem when iterating through the dying tasks list. The issue occurs because the iterator may attempt to access tasks whose usage count has dropp...

PT-2026-97814

Name of the Vulnerable Software and Affected Versions libfyaml version 0.9.6 Description A stack exhaustion issue exists in the fy atom iter format function. When the software processes a specially crafted YAML document containing a very large literal or folded block scalar, the function repeated...

PT-2026-94386

Name of the Vulnerable Software and Affected Versions Soup Sieve versions prior to 2.9 Description An issue exists in the selector iter function within src/soupsieve/css parser.py where the raw selector is trimmed using RE WS END. Because this regular expression is anchored only at the end and us...

PT-2026-94862

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the TXF key sanitiser within the iwlwifi module. The function iwl mvm frob txf key iter incorrectly calculates the memset start offset when a full key match...

PT-2026-94444

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fuse direct write iter function where the pos variable is captured before the generic write checks function is called. For writes using the O APPEND flag, generic...

PT-2026-94704

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mt7996 wireless driver. The function mt7996 mac reset vif iter queues non-default virtual interface vif links for kfree rcu while the dev-wcid array...

PT-2026-94672

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the import ubuf function can fail if the address range provided by the userspace ublk server is outside the allowed user address space. When this failure occurs, th...

PT-2026-94970

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where per-CPU map elements are stored using a rounded size, but the copy map value long function passes only the map-value size to bpf obj memcpy. Wh...

PT-2026-93614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme tcp handle c2h data function where the system fails to verify if a command requested a data read when processing a C2HData PDU. A malicious controller can...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: The memory leak in iter-temp occurred during the reading of tracepipe. kmemleak reports: Unreferenced object: 0xffff88814d14e200 size 256 Details: - Process: “cat”, PID: 336; Jiffies: 4294871818 age: 779.490 seconds - He...

PT-2026-96464

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailer buf on readdir copy failure On a readdir downcall, orangefs devreq write iter frees op-downcall.trailer buf with vfree when copy from iter full fails, but does not clear the pointer before got...

PT-2026-72552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component regarding writeback error handling. Specifically, the writeback iter loop fails to correctly handle errors; when an error occurs, the function must...

CVE-2026-68175

The CVE-2026-68175 entry documents a fixed resource leak in the Linux kernel tracing subsystem (mmiotrace) related to trace_pipe close. Specifically, mmio_pipe_open() allocated a header_iter and took a pci_dev reference when trace_pipe opened; mmio_close() frees them but was not wired to the trac...

CVE-2026-68175 tracing: Fix resource leak on mmiotrace trace_pipe close

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix resource leak on mmiotrace tracepipe close The mmiotrace tracer was added May 12th 2008. At that time, resources created in pipeopen could not be freed because there was not pipeclose function pointer of the tracer...