Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: ip6tunnel: Fixed the handling of NEXTHDRFRAGMENT in ip6tnlparsetlvenclim. syzbot pointed out that the handling of NEXTHDRFRAGMENT is incorrect. The “fragoff” operation can only be performed if enough bytes are pulled into the...

PT-2026-72939

In the Linux kernel, the following vulnerability has been resolved: binfmt misc: restore write access when removing an entry Registering an entry with the MISC FMT OPEN FILE flag opens the interpreter via open exec which denies write access to it for as long as the entry exists. Removing the entr...

CVE-2026-68419 RDMA/irdma: Prevent rereg_mr for non-mem regions

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent reregmr for non-mem regions When a QP/CQ/SRQ is created, a two step process is used where the buffer is allocated in userspace and explicitly registered with the normal regmr mechanism prior to creating the...

The vulnerability of the mptcp_subflow_init() function in the kernel’s net/mptcp/protocol.c file in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpsubflowinit function in the net/mptcp/protocol.c module of the Linux kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

SUSE CVE-2026-52956

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in cephxdecrypt In cephxdecrypt, a part of the buffer p is interpreted as a cephxencryptheader, and the magic field of this struct is accessed. This happens without any guarantee that t...

The vulnerability of the setup_base_ctxt() function in the drivers/infiniband/hw/hfi1/file_ops.c file of the Linux operating system’s kernel driver allows a hacker to cause a service failure.

The vulnerability of the setupbasectxt function in the drivers/infiniband/hw/hfi1/fileops.c file of the Linux kernel’s InfiniBand driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260119-7322

A vulnerability in the nilfscleardirtypages function of the fs/nilfs2/page.c module of the Linux kernel NILFS2 file system support is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004327 advisory. In uvcparsestandardcontrol of uvcdriver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure wi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003061)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003061 advisory. An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xenfailsafecallback entry point in arch/x86/entry/entry64.S does not...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003059 advisory. The movepages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003167)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003167 advisory. Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002467 advisory. Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003452 advisory. Race condition in the sndpcmperiodelapsed function in sound/core/pcmlib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial o...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002184 advisory. The dgramrecvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structu...

UBUNTU-CVE-2022-50851

In the Linux kernel, the following vulnerability has been resolved: vhostvdpa: fix the crash in unmap a large memory While testing in vIOMMU, sometimes Guest will unmap very large memory, which will cause the crash. To fix this, add a new function vhostvdpageneralunmap. This function will only...

CVE-2023-53821

CVE-2023-53821 pertains to the Linux kernel, addressing a slab-use-after-free in ip6_vti/decode_session6 when an IPv6 vti skb cb field is modified during enqueuing. The vulnerability could enable use-after-free during transmission via vti6_tnl_xmit path; the fix, per the advisory, is to set the s...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986470 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: fix possible use-after-free in smsc75xxbind The commit 46a8b29c6306 net: usb: fix memor...

DEBIAN-CVE-2025-38364

In the Linux kernel, the following vulnerability has been resolved: mapletree: fix MASTATEPREALLOC flag in maspreallocate Temporarily clear the preallocation flag when explicitly requesting allocations. Pre-existing allocations are already counted against the request through masnodecountgfp, but...

The vulnerability of the manage_oob() function in the net/unix/af_unix.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the manageoob function in the net/unix/afunix.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

UBUNTU-CVE-2024-56624

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix outfput in iommufdfaultalloc As fput calls the file-fop-release op, where fault obj and ictx are getting released, there is no need to release these two after fput one more time, which would result in imbalanced...