ROS-20261009-73-0419

The vulnerability of the mtk-mdp component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Do not leak some plane state. Apparently, no one noticed that the mdp5 plane states are being leaked quite severely. This issue was addressed since we introduced the planestate-commit refcount mechanism a few years...

appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2026-86049 via jupyter-server (1.13.5)

jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2026-86049 via jupyter-server (1.13.5)

jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2026-86049 Source advisory: OSV:GHSA-C3MW-737P-C7G2...

foursquare-map-sdk (>=2.0.0, <=3.1.0), metro-sp-mdp (>=0.1.0, <=2.1.2) +3 more potentially affected by CVE-2026-73415 via jupyterlab (3.2.9)

jupyterlab PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - foursquare-map-sdk =2.0.0, =0.1.0, =0.8.2, =0.12.0.dev0, =1.11.0, =1.13.0 Source cves: CVE-2026-73415 Source advisory: OSV:PYSEC-2026-3671...

mtk-mdp Kernel DoS

The vulnerability of the mtk-mdp component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

foursquare-map-sdk (>=2.0.0, <=3.1.0), metro-sp-mdp (>=0.1.0, <=2.1.2) +3 more potentially affected by CVE-2026-73415 via jupyterlab (3.2.9)

jupyterlab PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - foursquare-map-sdk =2.0.0, =0.1.0, =0.8.2, =0.12.0.dev0, =1.11.0, =1.13.0 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC...

foursquare-map-sdk (>=2.0.0, <=3.1.0), metro-sp-mdp (>=0.1.0, <=2.1.2) +3 more potentially affected by CVE-2026-73626 via jupyterlab (3.2.9)

jupyterlab PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - foursquare-map-sdk =2.0.0, =0.1.0, =0.8.2, =0.12.0.dev0, =1.11.0, =1.13.0 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G7...

appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2026-5422 via jupyter-server (1.13.5)

jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2026-5422 Source advisory: OSV:PYSEC-2026-2532...

foursquare-map-sdk (>=2.0.0, <=3.1.0), metro-sp-mdp (>=0.1.0, <=2.1.2) +3 more potentially affected by CVE-2026-42557 via jupyterlab (3.2.9)

jupyterlab PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - foursquare-map-sdk =2.0.0, =0.1.0, =0.8.2, =0.12.0.dev0, =1.11.0, =1.13.0 Source cves: CVE-2026-42557 Source advisory: OSV:PYSEC-2026-2537...

foursquare-map-sdk (>=2.0.0, <=3.1.0), metro-sp-mdp (>=0.1.0, <=2.1.2) +3 more potentially affected by CVE-2026-40171 via jupyterlab (3.2.9)

jupyterlab PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - foursquare-map-sdk =2.0.0, =0.1.0, =0.8.2, =0.12.0.dev0, =1.11.0, =1.13.0 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

metro-sp-mdp (>=0.1.0, <=2.1.2) potentially affected by CVE-2025-53000 via nbconvert (6.4.2)

nbconvert PYPI version 6.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - metro-sp-mdp =0.1.0, =2.1.2 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: A reference leak bug was fixed in mtkmdpremove. In mtkmdpprobe, vpugetplatdevice increases the reference count of the returned platform device. Add platformdeviceput to prevent reference leaks...

SUSE CVE-2026-43207

In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe function Add mtkmdpunregisterm2mdevice on the error handling path to prevent resource leak. Add check for the return value of vpugetplatdevice to prevent null pointer dereference. And...

SUSE CVE-2026-43270

In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtkmdpremove In mtkmdpprobe, vpugetplatdevice increases the reference count of the returned platform device. Add platformdeviceput to prevent reference leak...

CVE-2026-43270

A flaw was found in the Linux kernel's media: mtk-mdp module. A reference leak occurs because the vpugetplatdevice function increases a reference count that is not properly decreased by platformdeviceput in mtkmdpremove. This issue could potentially lead to resource exhaustion over time, which ma...

foursquare-map-sdk (>=2.0.0, <=3.1.0), metro-sp-mdp (>=0.1.0, <=2.1.2) +3 more potentially affected by CVE-2026-42557 via jupyterlab (3.2.9)

jupyterlab PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - foursquare-map-sdk =2.0.0, =0.1.0, =0.8.2, =0.12.0.dev0, =1.11.0, =1.13.0 Source cves: CVE-2026-42557 Source advisory: OSV:GHSA-MQCG-5X36-VF...

CVE-2026-43207

A flaw was found in the Linux kernel's mtk-mdp media driver. Improper error handling in the probe function could lead to a resource leak. Additionally, a missing check for the return value of vpugetplatdevice could result in a null pointer dereference, potentially causing a system crash and leadi...

EUVD-2026-27667

In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtkmdpremove In mtkmdpprobe, vpugetplatdevice increases the reference count of the returned platform device. Add platformdeviceput to prevent reference leak...

CVE-2026-43270

In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtkmdpremove In mtkmdpprobe, vpugetplatdevice increases the reference count of the returned platform device. Add platformdeviceput to prevent reference leak...