Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink currently look up the task from the pid once, then perform the ptrace access check on that task, and finally look up the task from the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers The FRU and I2C bsg handlers stage their transfers in a DMAPOOLSIZE 256-byte bounce buffer obtained via dmapoolalloc, which does not zero out the allocation. They...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: vxlan: use neighhasnapshot in routeshortcircuit The neighbor hardware address n-ha can be updated asynchronously by the neighbor subsystem, protected by n-halock seqlock. Reading n-ha without holding the seqlock loop can lead to...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskbmaypull mplsselectmultipath calls mplsmultipathhash to select a next hop when an MPLS route has multiple next hops. While traversing the MPLS label stack, the hash routine caches hdr for the current...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: validate uCAN receive record lengths pcanusbfddecodebuf walks through uCAN records packed in a single USB receive buffer. Each record must contain the fixed header corresponding to its type; the CAN payload bytes mu...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipcl2sendmsg Syzbot reported a slab-use-after-free in ipvlanhardheader when called from tipcl2sendmsg. The root cause is that tipcdisablel2media calls synchronizenet while b-mediaptr is still valid. This allows...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid cirange initialization SyZBot reported a shift-out-of-bounds condition in vccconnect: UBSAN: shift-out-of-bounds in net/atm/common.c:382:32 The shift exponent -1 is negative CPU: 0 UID: 0 PID: 5987...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlminspectfile lock-drop nlmtraversefiles pins the current file with fcount++ across a mutexunlock for nlminspectfile, but nothing pins the saved next pointer. A concurrent nlmreleasefile can kfree the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Thunderbolt: The DROM dual link port number was bound prior to indexing sw-ports. tbdromparseentryport validates the device-supplied header-index against sw-config.maxportnumber before indexing sw-ports, but the sibling field...

exploit-t-platform

Exploit-t Platform Practical-risk vulnerability prioritisatio...

kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period

A flaw was found in the Linux kernel's IPv4 networking subsystem. A race condition occurs during concurrent processing of retransmitted Transmission Control Protocol TCP connection requests or socket migrations, allowing socket options to be freed while still in use. A remote attacker could explo...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.45 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-63968: ipv...

Exploit for CVE-2026-115904

CVE-2026-115904 — OS Command Injection via openExternalLinks...

CVE-2026-99189

A flaw was found in the Linux kernel's General-Purpose Input/Output GPIO MXC driver. This vulnerability can result in a Denial of Service DoS through a system crash if an interrupt arrives while the device is initializing. Because the interrupt handler is registered before its required data...

CVE-2026-99186

A flaw was found in the Linux kernel's x86 instruction evaluation component. A local user can exploit this vulnerability to cause a Denial of Service DoS by executing instructions with segment register overrides that trigger an infinite loop during instruction decoding. This condition traps the...

Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. CVE-2026-6421...

Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-64217: netfs: Fix overrun check in netfsextractuseriter bsc1272874. CVE-2026-68426:...

SUSE-SU-2026:5020-1 Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-64217: netfs: Fix overrun check in netfsextractuseriter bsc1272874. -...

Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...