CVE-2026-99225

In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process keyring searches An authorization payload and its saved credentials must remain valid while searchprocesskeyringsrcu searches the requestor's keyrings. The function validates the...

CVE-2026-99225

The Linux kernel contains a vulnerability in the keys subsystem where a NULL pointer dereference can occur during process keyring searches. The issue arises because the search_process_keyrings_rcu() function fails to ensure that the authorization payload remains valid during its RCU read-side sec...

EUVD-2026-115267

In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process keyring searches An authorization payload and its saved credentials must remain valid while searchprocesskeyringsrcu searches the requestor's keyrings. The function validates the...

CVE-2026-99225: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process…

In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process keyring searches An authorization payload and its saved credentials must remain valid while searchprocesskeyringsrcu searches the requestor's keyrings. The function validates the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146273 advisory. In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a...

CVE-2026-90012

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI subsystem. When handling Direct Memory Access DMA mappings, an issue arises if a receive RX mapping fails after a transmit TX mapping succeeds, or if a TX mapping fails during a subsequent transfer. This can lead to incorrect...

Linux Distros Unpatched Vulnerability : CVE-2026-98477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task...

AZL-108794 CVE-2026-98477 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

DEBIAN-CVE-2026-98477

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

UBUNTU-CVE-2026-98477

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

CVE-2026-98500

In the Linux kernel, the following vulnerability has been resolved: HID: hid-oxp: use canceldelayedworksync in remove oxphidremove uses canceldelayedwork for all three delayed work items. canceldelayedwork only dequeues a pending work item without waiting for a currently executing callback to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131772 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Limit NVMe request size to 2 MiB The HBA firmware reports NVMe MDTS values based o...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature: A second class of oops is als...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: Replace the guest-triggerable BUGON in ioeventfd datamatch with getunaligned Remove a BUGON that has been reachable since its initial addition, dating back to 2009, and instead use getunaligned to perform potentially-unalign...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug on in ext4escacheextent as ext4splitextentat failed We got follow bugon when run fsstress with injecting IO fault: 130747.323114 kernel BUG at fs/ext4/extentsstatus.c:762! 130747.323117 Internal error: Oops - BUG: 0...

Astra Linux – vulnerability in linux-5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches that may involve a NULL pointer dereference in the handling of AppArmor notifications. The bug can be triggered by a non-privileged local user. This may result in a kernel oops...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Driver: iio: added missing checks for access to iioinfo’s callbacks. Some callbacks from the iioinfo structure are accessed without any checks. Therefore, if a driver does not implement these callbacks, attempting to access th...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: Check the packet for fixup for true limits. If a device sends a packet that lies between 0 and sizeofu64, the value passed to skbtrim as the packet length will wrap around, resulting in a very large value. The driver...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...

Astra Linux – vulnerability in linux-5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches that may involve a NULL pointer dereference in the handling of AFINET/AFINET6 socket mediation. The bug can be triggered by an unprivileged local user. This may result in a kernel oops...