Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/lima: call drmmminit with a valid allocation range Currently, limavmcreate is executed before vastart and vaend are set up; both of them are initialized to 0. limavmcreate then calls drmmminit using these values as arguments...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146284 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctpprocessstrresetinreq When processing a RESETINREQUEST from a...

Linux Distros Unpatched Vulnerability : CVE-2026-99066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 can: remove private CAN skb headroom infrastructure removed the...

SUSE CVE-2026-99066

In the Linux kernel, the following vulnerability has been resolved: can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 "can: remove private CAN skb headroom infrastructure" removed the skbresetmacheader/skbresetnetworkheader/ skbresettransportheader calls from initcanskb...

DEBIAN-CVE-2026-99066

In the Linux kernel, the following vulnerability has been resolved: can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 "can: remove private CAN skb headroom infrastructure" removed the skbresetmacheader/skbresetnetworkheader/ skbresettransportheader calls from initcanskb...

CVE-2026-99066

The Linux kernel contains a vulnerability in the CAN (Controller Area Network) subsystem related to how skb headers are initialized. Specifically, commit 9f10374bb024 removed necessary calls to skb_reset_mac_header(), skb_reset_network_header(), and skb_reset_transport_header() within init_can_sk...

EUVD-2026-108732

In the Linux kernel, the following vulnerability has been resolved: can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 "can: remove private CAN skb headroom infrastructure" removed the skbresetmacheader/skbresetnetworkheader/ skbresettransportheader calls from initcanskb...

CVE-2026-99066 can: dev: init_can_skb(): restore skb header initialization

In the Linux kernel, the following vulnerability has been resolved: can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 "can: remove private CAN skb headroom infrastructure" removed the skbresetmacheader/skbresetnetworkheader/ skbresettransportheader calls from initcanskb...

CVE-2026-98965 ice: Restore Ordered MMIO Writes for Tx Doorbells

In the Linux kernel, the following vulnerability has been resolved: ice: Restore Ordered MMIO Writes for Tx Doorbells The DQL accounting state which tracks the number of bytes queued for the NIC to transmit, namely dql-numqueued, is updated by the ICE driver when it invokes netdevtxsentqueue...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.15. It arises because mntnstreeremove releases references to the mount namespace via callrcu, causing fsnotify tags to be removed within the context of a RCU soft interrupt. This, in turn, may trigger calls to functions that sleep under...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143086 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure -ioerrwork is cancelled in nvmefcdeletectrl nvmefcdeleteassocation waits fo...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142687)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142687 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctpprocessstrresetinreq When processing a RESETINREQUEST from a...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142694 advisory. In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in keyextract When a packet arrives on an ARPHRDNON...

CVE-2026-93044

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability occurs when the BPF interpreter attempts to process specific arena-related instructions that it does not support, particularly when a BPF program uses an arena map. This can lead to a kernel bug and an...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: check IOWQBITEXIT inside work run loop Currently this check is performed before executing pending work items. Normally this works fine, as work items either block triggering creation of a new worker for subsequent...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size A check has been added to ext4setattr to convert files from inline data storage to extent-based storage when truncate increases the file size beyond the inlin...

SUSE CVE-2026-98698

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload filsencryptassocreq accepts a ReAssociation Request frame whose last element is the FILS Session element. cryptlen is then zero and aessivencrypt is called with an emp...

DEBIAN-CVE-2026-98698

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload filsencryptassocreq accepts a ReAssociation Request frame whose last element is the FILS Session element. cryptlen is then zero and aessivencrypt is called with an emp...

CVE-2026-98698

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload filsencryptassocreq accepts a ReAssociation Request frame whose last element is the FILS Session element. cryptlen is then zero and aessivencrypt is called with an emp...

AZL-108744 CVE-2026-98698 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload filsencryptassocreq accepts a ReAssociation Request frame whose last element is the FILS Session element. cryptlen is then zero and aessivencrypt is called with an emp...