CVE-2026-76054

Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which is inherited by subprocesses launched...

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that's used to deliver next-stage payloads and likely sell access to ransomware groups. According to findings from Gen Digital, WordlistLoader is being used to deliver Amatera Stealer aka ACR...

Tracking PavinLoader across ClickFix and fake download campaigns

In our previous analysis of the malicious RenPy campaigns, we identified a multi-stage loader deployed as part of the infection chain. Further threat hunting has since shown that the same loader, which we track as PavinLoader , is being used across several different campaigns, including ClickFix...

CVE-2026-74679

A flaw was found in the Linux kernel's USB gadget NCM Network Control Model function fncm. A malicious host can exploit an integer overflow vulnerability by supplying a large offset. This overflow causes a signed index variable to become negative, bypassing security checks and leading to an...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Rejects undersized DACLs before parsing ACEs The parsedacl function limits the number of attacker-controlled ACE entries by comparing it with the minimum number of ACE entries that fit within the DACL size. The DACL size...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net: watchdog: fix refcount tracking races The responsible commit changed the uncorrected calls to devhold/devput in the watchdog code to use the corrected devholdtrack/devputtrack functions which were later renamed to...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Binder: Fixed the issue where dereferencing the null-ptr variable occurred unexpectedly. Syzbot reported several issues introduced by commit 44e602b4e52f „binderalloc: added missing mmaplock calls when using VMA”. In these...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: 1. fs/proc/taskmmu: Fixed the race condition in makeuffdwphugepte where updates to the “Dirty” or “Accessed” status of a page might be lost when PAGEMAPSCAN writes-protects a HUGETLB PTE. 2. fs/proc/taskmmu: The...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: A deadlock occurs when uvcstatusstop is called from asyncctrl.work. If a UVC camera has an asynchronous control, uvcstatusstop may be called from asyncctrl.work: c uvcctrlstatuseventwork uvcctrlstatusevent...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fixed a KASAN slab-out-of-bounds issue in amdgpucoredump’s ring dump operation. The ring content dump in amdgpucoredump involves two separate loops that iterate over adev-rings: the first loop counts rings whose fence...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power-up sequence According to the errata1: ERR050531: The power-down handshake for VPUNOC may hang during the power-up/down cycling of VC8000E/VPUMIX. Description: There may be a timing issue...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: ixp4xxhss: Fixed duplicate HDLC netdev allocations. The ixp4xxhssprobe function allocates two HDLC netdevs. The first one is stored in the ndev variable, initialized, and registered with the registerhdlcdevice function. The...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Validates attribute values during lookups. The ntfsattrfind and ntfsexternalattrfind functions check whether the generic resident attribute values fit within their respective attribute records, and ensure that fixed-size...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tcp: The task of freeing md5siginfo is delayed beyond the RCU grace period in tcpconnect. The reconciliation of md5 and ao in tcpconnect net/ipv4/tcpoutput.c has two symmetric branches: c if needsmd5 tcpaodestroysocksk, false; el...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Rejects short AUTHRECEIVE buffers. The nvmetexecuteauthreceive function relies on the AUTHRECEIVE allocation length. It only checks whether the length is non-zero and matches the transfer length. In the SUCCESS1 and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net/sched: actct: Fixed the leak in nfconnlabels on two error paths. The function tcfctfillparams calls nfconnlabelsget to set putlabels, when TCACTLABELS is present. However, two subsequent error paths use a bare return inste...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: rtw88 – corrected the incorrect type of variable pcigetdatadirty in AER handlers. The rtw88 driver stores an IEEE80211hw pointer via pcisetdatadirty during probe time. However, functions like ioerrordetected and ioresume...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/stm: ltdc: fix late dereference check In ltdccrtcsetcrcsource, the struct drmcrtc was dereferenced before the pointer check by the containerof function. This could cause a kernel panic. Fix this “match warning”:...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fixed a NULL pointer dereference in pnfsmarkmatchinglsegsreturn. The commit de144ff4234f fixes the issue by changing pnfsreturnlayout to call pnfsmarkmatchinglsegsreturn, with NULL passed as the argument to the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fixed an overflow issue when reading EDID. The length of the EDID block can be longer than 256 bytes. Therefore, we should use int instead of u8 for the edidpos variable...