Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

There is a known vulnerability in the l2capparseconfreq function of the Linux kernel’s net/bluetooth/l2capcore.c file, which can be exploited to remotely leak kernel pointers. We recommend upgrading to a later commit:...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: SCTP: Fixed a kernel-infoleak issue for SCTP sockets. The syzbot reported a kernel-infoleak issue of 4 bytes. After analysis, it turned out that r-idiagexpires was not initialized when inetsctpdiagfill called...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053420)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053420 advisory. In the Linux kernel, the following vulnerability has been resolved: inetdiag: fix kernel-infoleak for UDP sockets KMSAN reported a kernel-infoleak 1, that can...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098978)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098978 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: Make insnrwemulatebits do insn-n samples The insnrwemulatebits function is used as a...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: xfrm: fixed another kernel-infoleak issue in algorithm dumping. During fuzz testing, the following issue was discovered: BUG: KMSAN: kernel-infoleak in copytoiter+0x598/0x2a30, copytoiter+0x598/0x2a30,...

Linux Distros Unpatched Vulnerability : CVE-2026-72441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: fix kernel-infoleak in dgramrecvmsg KMSAN reported a kernel-infoleak in moveaddrtouser: BUG: KMSAN: kernel-infoleak in instrumentcopytouser...

UBUNTU-CVE-2026-72441

In the Linux kernel, the following vulnerability has been resolved: ieee802154: fix kernel-infoleak in dgramrecvmsg KMSAN reported a kernel-infoleak in moveaddrtouser: BUG: KMSAN: kernel-infoleak in instrumentcopytouser include/linux/instrumented.h:131 inline BUG: KMSAN: kernel-infoleak in...

CVE-2026-72441

In the Linux kernel, the following vulnerability has been resolved: ieee802154: fix kernel-infoleak in dgramrecvmsg KMSAN reported a kernel-infoleak in moveaddrtouser: BUG: KMSAN: kernel-infoleak in instrumentcopytouser include/linux/instrumented.h:131 inline BUG: KMSAN: kernel-infoleak in...

CVE-2026-72441 ieee802154: fix kernel-infoleak in dgram_recvmsg()

In the Linux kernel, the following vulnerability has been resolved: ieee802154: fix kernel-infoleak in dgramrecvmsg KMSAN reported a kernel-infoleak in moveaddrtouser: BUG: KMSAN: kernel-infoleak in instrumentcopytouser include/linux/instrumented.h:131 inline BUG: KMSAN: kernel-infoleak in...

CVE-2026-72441 ieee802154: fix kernel-infoleak in dgram_recvmsg()

In the Linux kernel, the following vulnerability has been resolved: ieee802154: fix kernel-infoleak in dgramrecvmsg KMSAN reported a kernel-infoleak in moveaddrtouser: BUG: KMSAN: kernel-infoleak in instrumentcopytouser include/linux/instrumented.h:131 inline BUG: KMSAN: kernel-infoleak in...

CVE-2026-72441: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ieee802154: fix kernel-infoleak in dgramrecvmsg KMSAN reported a kernel-infoleak in moveaddrtouser: BUG: KMSAN: kernel-infoleak in instrumentcopytouser include/linux/instrumented.h:131 inline BUG: KMSAN: kernel-infoleak in...

PT-2026-72629

In the Linux kernel, the following vulnerability has been resolved: ieee802154: fix kernel-infoleak in dgram recvmsg KMSAN reported a kernel-infoleak in move addr to user: BUG: KMSAN: kernel-infoleak in instrument copy to user include/linux/instrumented.h:131 inline BUG: KMSAN: kernel-infoleak in...

PT-2026-73029

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak occurs in the Linux kernel when processing MPLS routes. The mpls getroute function constructs an RTM NEWROUTE reply for an RTM GETROUTE request using a struct rtmsg...

CVE-2026-53243

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix using an uninitialized stack variable in rseqexituserupdate There is an bug in which an uninitialized stack variable is used in rseqexituserupdate as reported by syzbot: BUG: KMSAN: kernel-infoleak in rseqsetidsgetcsadd...

CVE-2026-53243: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix using an uninitialized stack variable in rseqexituserupdate There is an bug in which an uninitialized stack variable is used in rseqexituserupdate as reported by syzbot: BUG: KMSAN: kernel-infoleak in rseqsetidsgetcsadd...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013291 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel-infoleak in nilfsioctlwrapcopy The ioctl helper function nilfsioctlwrapcopy,...

CVE-2026-22978: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iwpoint struct iwpoint has a 32bit hole on 64bit arches. struct iwpoint void user pointer; / Pointer to the data in user space / u16 length; / number of fields or size in bytes / u16 flags;...

Linux Distros Unpatched Vulnerability : CVE-2026-22978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: avoid kernel-infoleak from struct iwpoint struct iwpoint has a 32bit hole on 64bit arches. struct iwpoint void user pointer; / Pointer to the data in user...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003933)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003933 advisory. A heap data infoleak in multiple locations including L2CAPPARSECONFRSP was found in the Linux kernel before 5.1-rc1. Tenable has extracted the preceding description...

CVE-2023-53863: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netlink: do not hard code device address lenth in fdb dumps syzbot reports that some netdev devices do not have a six bytes address 1 Replace ETHALEN by dev-addrlen. 1 Case of a device where dev-addrlen = 4 BUG: KMSAN:...