Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Squashfs: negative file sizes are now rejected in squashfsread inode. Syskaller reports a “WARNING in ovlcopyupfile” in overlayfs. This warning occurs because the underlying Squashfs file system returns a file with a negative...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed idx validation in i40evalidatequeuemap. Ensured that the idx value is within the range of active/initialized TC’s when iterating over vf-chidx in i40evalidatequeuemap...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: A double-free operation was corrected in userclusterconnect. userclusterdisconnect frees "conn-ccprivate", which is actually "lc". However, the error handling frees "lc" again. Setting "lc" to NULL in this case can prevent...

CVE-2025-68742 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68742 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2024-57795 affecting package kernel for versions less than 6.6.121.1-1

CVE-2024-57795 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68363 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68363 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2026-22980 affecting package kernel for versions less than 6.6.121.1-1

CVE-2026-22980 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-57982 affecting package kernel for versions less than 6.6.121.1-1

CVE-2024-57982 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-40149 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-40149 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check the device memory pointer before using it. Add a NULL check before accessing device memory to prevent a crash if the dev-dm allocation in mlx5initonce fails...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: A NULL pointer check was added in exynoschipidprobe. socdevattr-revision can be NULL; therefore, a pointer check was added to prevent potential NULL pointer dereferencing. This is similar to the fix i...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: The WARNON message in nouveaufencecontextkill has been fixed. Nouveau is designed in such a way that it is expected that fences are only signaled through nouveaufencesignal. However, at least in one other place,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001335 advisory. A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004328 advisory. An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003742 advisory. Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001294 advisory. In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001546 advisory. fs/seqfile.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bound...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001421)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001421 advisory. A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003900 advisory. A pivotroot race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001116 advisory. An integer overflow flaw was found in the Linux kernel's createelftables function. An unprivileged local user with access to SUID or otherwise privileged binary coul...