Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00updatefruversions qla2x00updatefruversions copies the user-supplied BSG request into a fixed 256-byte stack buffer bsgDMAPOOLSIZE, then iterates list-count times over the qlaimageversion...

CVE-2026-89852

A flaw was found in scsi: qla2xxx. An uninitialized mailbox structure mbxcmdt can lead to the exposure of kernel stack memory to userspace. This occurs when the qla2x00getfirmwarestate function copies uninitialized mailbox register values, which are not properly written due to early return paths ...

CVE-2026-98853

A flaw was found in the Linux kernel's Generic Segmentation Offload GSO implementation. When processing deeply nested IP-in-IP packets, recursive segmentation is not properly restricted, which can exhaust kernel stack memory. A remote attacker could exploit this vulnerability by transmitting...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression The second memcpy in lowpaniphcmcastctxaddrcompress uses &data1 as destination and &ipaddr-s6addr11 as source; both should be offset by one: &data2 and...

CVE-2026-98201 Input: zero ff_effect before compat copy in input_ff_effect_from_user

In the Linux kernel, the following vulnerability has been resolved: Input: zero ffeffect before compat copy in inputffeffectfromuser In the compat path inputffeffectfromuser aliases the caller's native struct ffeffect with the smaller struct ffeffectcompat and copies only the compat sized prefix:...

CVE-2026-98201

A vulnerability exists in the Linux kernel within the compat path of the input_ff_effect_from_user() function. The issue arises because the function aliases a native struct ff_effect with a smaller struct ff_effect_compat and only copies the compat-sized prefix using copy_from_user(). Consequentl...

PT-2026-106530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the input ff effect from user function where the native struct ff effect is aliased with a smaller struct ff effect compat. During the copy process, only the prefix of...

PT-2026-115738

In the Linux kernel, the following vulnerability has been resolved: Input: zero ff effect before compat copy in input ff effect from user In the compat path input ff effect from user aliases the caller's native struct ff effect with the smaller struct ff effect compat and copies only the compat...

CVE-2026-97554

A flaw was found in the Linux kernel's Server Message Block SMB client. When handling malformed directory entries with invalid security identifiers, the client fails to verify whether data parsing succeeded before processing file attributes. A malicious or compromised server could exploit this...

CVE-2026-89858: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00updatefruversions qla2x00updatefruversions copies the user-supplied BSG request into a fixed 256-byte stack buffer bsgDMAPOOLSIZE and then iterates list-count times over the...

CVE-2026-72481

The CVE-2026-72481 issue affects the Linux kernel AK8975 magnetometer driver under iio. It describes four instances where uninitialized kernel stack memory could be leaked when i2c_smbus_read_i2c_block_data_or_emulated() returns a value smaller than the buffer size. The fixed code adds validation...

CVE-2026-72481: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975 driver there are four instances where potential uninitialized kernel stack memory leaks can occur. If i2csmbusreadi2cblockdataoremulated...

CVE-2026-56099

OpenBSD before commit 6a23123 2026-06-18 contains an out-of-bounds read vulnerability in the mplsdoerror function within sys/netmpls/mplsinput.c that allows remote attackers to disclose kernel stack memory by sending crafted MPLS frames with 16 labels and no Bottom-of-Stack bit set...

CVE-2026-56099: Out-of-bounds Read

OpenBSD before commit 6a23123 2026-06-18 contains an out-of-bounds read vulnerability in the mplsdoerror function within sys/netmpls/mplsinput.c that allows remote attackers to disclose kernel stack memory by sending crafted MPLS frames with 16 labels and no Bottom-of-Stack bit set...

PT-2026-50785

Name of the Vulnerable Software and Affected Versions OpenBSD versions prior to commit 6a23123 Description An out-of-bounds read exists in the mpls do error function within sys/netmpls/mpls input.c. Remote attackers can disclose kernel stack memory by sending crafted MPLS frames containing 16...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001493 advisory. net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000914 advisory. The atyfbioctl function in drivers/video/fbdev/aty/atyfbbase.c in the Linux kernel through 4.12.10 does not initialize a certain data structure, which allows local...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003226)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003226 advisory. The sndtimeruserparams function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtai...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002668 advisory. The llccmsgrcv function in net/llc/afllc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002793)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002793 advisory. arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment CS in certain error cases, which allows local users to obtain...