Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Media: si470x: Fixed a use-after-free in si470xintincallback Syzbot reported a use-after-free in si470xintincallback. This indicates that urb-context, which contains a struct si470xdevice object, is freed when si470xintincallback...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buffer is terminated with NUL characters. Currently, we allocate a kernel buffer of a certain size and copy data from user space to that buffer. Later, we use kstrtouint on this buffer, but we do not...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ixgbe: Added locking to prevent panics when setting sriovnumvfs to zero. It is possible to disable VFs while the PF driver is processing requests from the VF driver. This can result in a panic. BUG: Unable to handle kernel...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix for the memory leak in mlx5drcmdcreatereformatctx. When mlx5cmdexec fails in mlx5drcmdcreatereformatctx, the memory pointed to by ‘in’ is not released, which can lead to a memory leak. Move the memory release...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: For the clk subsystem, in the qcom module, there is a issue where gcc-sm6350 uses parentmap for two clocks that actually doesn’t exist. If a clkrcg2 has a parent, it should also have the parentmap property defined. Otherwise, a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In blkstacklimits, we check that the t-chunksectors value is a multiple of the t-physicalblocksize value. However, by determining the chunksectors value in bytes, it is possible to overflow the unsigned int variable that stores...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fixed the incorrect RCU protection in rtspinunlock. rtspinunlock releases the RCU protection before unlocking the lock. This creates a potential for the following UAF Uninitialized Arbitrary Fault scenario: T1 T2...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KEYS: Trusted – Fixed a memory leak in tpm2loadcmd. tpm2loadcmd allocates a temporary blob indirectly through tpm2keydecode, but the blob is not freed during failure paths. This issue can be addressed by wrapping the blob with a...

CVE-2026-74632

A flaw was found in the Linux kernel's memory management mm/hugememory. A race condition can occur between a memory shrinker and a concurrent page fault when handling huge zero pages. This race can lead to the hugezeropfn being incorrectly set, causing the huge zero page to be misidentified as an...

CVE-2026-74599

A flaw was found in the Linux kernel's memory management subsystem. A race condition exists in the ptdump mechanism, specifically when ptdumpwalkpgd is used on non-initial memory management structures on x86 and arm64 architectures. This allows for a race between ptdump and kernel page table...

CVE-2026-74715

A flaw was found in the kernel. A reference imbalance vulnerability exists in the Berkeley Packet Filter BPF conntrack kfuncs. This occurs when the 'opts' argument, which can point to a shared map value, has its network namespace identifier netnsid read separately during reference acquisition and...

SUSE-SU-2026:3721-1 Security update for the Linux Kernel (Live Patch 54 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.219 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT...

CVE-2026-74712

A flaw was found in the Linux kernel's vdpa/mlx5 driver. This vulnerability occurs due to an incorrect calculation of buffer length within the createdirectkeys function, causing the system to read beyond its allocated memory boundaries. A local attacker could exploit this memory corruption to...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 — GhostLock on Huawei Nova 9 NAM-AL00 Securi...

CVE-2026-74668

A flaw was found in the Linux kernel's packet handling mechanism. During concurrent network device reconfigurations, an inconsistency in how the hardheaderlen value is used can lead to memory corruption. This issue could allow an attacker to cause a denial of service by triggering a system crash ...

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.87 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

SUSE-SU-2026:3719-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.87 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

CVE-2026-74700

A flaw was found in the Linux kernel's traffic control classifier application programming interface API. A race condition can occur during the destruction of locked classifiers, specifically within the tcnewtfilter function. This race allows an unlocked classifier's request to prematurely decreme...

CVE-2026-74624

A flaw was found in the Linux kernel's netfilter component. Specifically, the TCP and SCTP connection tracking conntrack paths can attempt to log invalid packets while a critical lock is still held. If invalid logging is routed to nfnetlinklog and conntrack export is enabled, this can lead to a...

CVE-2026-74683

A flaw was found in the Linux kernel's evdev component. A local user could provide a specially crafted event type index to the EVIOCGMASK or EVIOCSMASK ioctls. This could lead to speculative execution mispredicting bounds checks and performing out-of-bounds loads, potentially resulting in...