Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Call srcu when importing watchpoint data. The function importwpinfo backs up the original guest memory contents of a watchpoint using readguestabs. This function is equivalent to kvmreadguest, and it resolves the issue...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/i915: A flaw that prevents NULL driverdata values in i915pciprobe. The pcimatchdevice function may return the dummy pcideviceidany entry when a device is forced-bound via sysfs using driveroverride. In this case, -driverdata ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: i2c: imx: fixed the issue where the bus gets locked during block-read operations on SMBus with a count of 0 atomic operation. SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects this...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Ensure that vpid02 is always flushed on the first use by setting lastvpid to 0 when allocating vpid02. The nestedvmxtransitiontlbflush function will always detect a VPID change upon the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Prevent deadlock during ep0 read loop Currently, the ffsep0read function holds ffs-mutex when it prepares to go to sleep and wait for an event. When no setup events are pending, it calls...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In the UpdateRecordDataRoot,Allocation functions in fs/ntfs3, the destination of the memmove operation is Add2Ptre, le16tocpue-view.dataoff. Here, e-view.dataoff comes from an NTFSDE stored on disk, within an INDEXROOT or...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10, and Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: The raw: section states that the issue with using ro-uniq after its memory was freed has been fixed in rawrcv. The rawrelease function unregisters raw CAN receive filters via canrxunregister. However, the deletion of the receiver...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: The flushing of tasks operates in a dependency order. virtiovsockremove stops the virtqueue and then flushes each task before freeing the enclosing virtiovsock. The current order does not take into account the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: qce – fix for underallocation of the AAD buffer The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculate...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - ata: patasl82c105: fixed the use of bridge revisions after a use-after-free occurred. - pcigetslot returns a referenced PCI device. Commit 44c10138fd4b “PCI: Change all drivers to use pcidevice-revision” replaced a...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: The capacity of the Dirty Page Table is validated during the logreplay copylcns operation. During the analysis phase of the $LogFile journal replay process, logreplay copies LCNs from each action log record into an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fixed a memory leak that occurred during registration failures. The allocated device name is never released when there are registration failures with early ULPI devices. This issue was addressed by initializing the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remoteproc starts in parallel with the NGD driver being probed, or the remoteproc is already up when the PDR lookup is being registered, or in the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: rtnetlink: The iflavfbroadcast field was set to zero to avoid a stack leak in the rtnlfillvfinfo function. However, the struct iflavfbroadcast structure was declared on the stack without initialization: c struct...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 “net: bridge: xmit: make sure we have at least eth header len bytes”, it is possible for a local user with eBPF TC hook access to attach a tc...

linux-4.1.15_CVE-2023-28772

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

CVE-2026-98398

A flaw was found in the Linux kernel's lock dependency validator lockdep. When a lock class is removed, such as during kernel module unloading, cached references in existing lock structures are not properly cleared. A local user can exploit this issue by triggering lock acquisitions that reuse...

CVE-2026-98430

A flaw was found in the Linux kernel's Elastic Fabric Adapter EFA driver. The driver enables interrupt request IRQ handling before initializing its administrative queues and frees those queues before disabling the interrupt handler. If an interrupt occurs while the queues are uninitialized or...

CVE-2026-98397

A flaw was found in the Linux kernel's x86-android-tablets driver. During device initialization, the driver saves a pointer to a device structure without incrementing its reference count, while dropping the active reference prematurely. If the device is released before driver teardown, a local us...

nmap-farewell

nmap-farewell This tool aims to demonstrate the capabilities of the nfnetlinkqueue feature of the Linux kernel. For more in-depth information, you can read this article. Before packets are being dropped by the kernel, they are sent to this tool for further processing. If a remote peer tries to...