Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData PDU nvmetcphandlec2hdata finds the request by command id and checks that it has a payload; however, it does not verify whether the command actually requests data reading...

CVE-2026-99256: Linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm…

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rwsemaphore for backgroundworklock. Write locks on rwsemaphores have strict owner semantics, but there was no guarantee that the process that locked...

Linux Distros Unpatched Vulnerability : CVE-2026-99256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm cache: fix issue with background work locking dm cache used a rwsemaphore for backgroundworklock. Write locks on rwsemaphores have strict owner semantics, bu...

CVE-2026-99158

A flaw was found in the Linux kernel's ring buffer component. When a reader process accessing memory-mapped trace data catches up with a concurrent writer still committing events, the kernel incorrectly treats the temporary absence of data as an error and triggers a kernel warning. A local user...

CVE-2026-99214 drm/vc4: hdmi: Move packet RAM enable to PM runtime

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime Audio can be triggered by the HPD handler and start up before video has been restored, calling vc4hdmiwriteinfoframe for the audio infoframe. vc4hdmiwriteinfoframe needs Packet...

CVE-2026-99089

In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable opclk in probe to balance runtime PM The probe function puts the device into the runtime PM active state with only the "iis" bus clock enabled, but it also sets priv-opclk to the parent of the RCLKSRC m...

CVE-2026-98883

A flaw was found in the Linux kernel's 8250 serial port driver. On systems utilizing MIPS Alchemy hardware, the driver fails to recognize a specific communication port type during device probing. This failure triggers an internal kernel warning during system startup, which can result in a Denial ...

CVE-2026-98874

A flaw was found in the Linux kernel's iwlwifi driver. A local user can trigger an unintended kernel warning by configuring Wake on Wireless LAN WoWLAN and suspending the system while disconnected from a network. On systems configured to panic or halt on kernel warnings, this flaw may lead to a...

CVE-2026-98983

In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken when the nsproxy is installed into a task in switchtasknamespaces and copynamespaces and dropped...

CVE-2026-98920

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing alloc tagging of direct mempool allocations Commit 1d78d56c43ef "netfs: Fix folioqueue ENOMEM in writeback by adding a mempool" added a mempool for the folioqueues and made the request, subrequest and folioqueu...

CVE-2026-98983 unshare: don't drop active namespace references that were never taken

In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken when the nsproxy is installed into a task in switchtasknamespaces and copynamespaces and dropped...

CVE-2026-98983

The Linux kernel contains a vulnerability where ksys_unshare() incorrectly drops active namespace references that were never taken. Specifically, when set_cred_ucounts() fails during an unshare operation (which occurs when alloc_ucounts() cannot allocate, typically when the real UID differs from ...

EUVD-2026-108777

In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken when the nsproxy is installed into a task in switchtasknamespaces and copynamespaces and dropped...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142749)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142749 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: clear sockops cb flags before force-closing a child socket A child socket inherits the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143087 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: clear sockops cb flags before force-closing a child socket A child socket inherits the...

CVE-2026-64591

A flaw was found in the Linux kernel's Intel IOMMU driver. This issue occurs because the driver attempts to disable I/O Page Fault IOPF handling for devices that never had it enabled, specifically when Shared Virtual Addressing SVA is used on hardware that does not support the PCI Page Request...

CVE-2026-93248

A flaw was found in the Linux kernel's drm/xe graphics driver. When a graphics device becomes unresponsive wedged and execution queues are terminated, the driver fails to retain the wedged status during cleanup. A local user could exploit this flaw during driver unbinding to trigger an unexpected...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2025-38105)

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initializes the timer, but in a rare case, the driver might be freed without the disconnect call. This leaves the timer in an active state while the assigned...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23278)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always walk all pending catchall elements During transaction processing we might have more than one catchall element: 1 live catchall element and 1 pending element that is coming as part of the new batch. If...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: futex: Clear stale exiting pointer in futexlockpi retry path Fuzzying/stressing futexes triggered: WARNING: kernel/futex/core.c:825 at waitforownerexiting+0x7a/0x80, CPU11: futexlockpis/524 When futexlockpiatomic sees that the...