Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Fix: Use strings when defining tracepoints for DA monitors. Using DA monitor tracepoints with KASAN enabled triggers the following warning: Bug: KASAN: Global-out-of-bounds access in doTraceEventRawEventEventDaMonitor+0xd6/0x1a0...

CLSA-2025-1747430081 Fix of 47 CVEs

CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots CVE-url: https://ubuntu.com/security/CVE-2024-44952 - driver core: Fix ueventsho...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fillframeinfo syzbot can send a packet containing 14 bytes, pretending it is a VLAN packet. Since fillframeinfo relies on skb-maclen already, extend the check to cover this case...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix uninit memory after failed miread in miformatnew Fix a KMSAN un-init bug identified by syzkaller. ntfsgetbh expects a buffer from sbgetblk; this buffer may not be up-to-date. We do not update the buffer prior to settin...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: can: bcm: bcmtxsetup: fixed KMSAN uninit-value in vfswrite Syzkaller reported the following issues: ===================================================== BUG: KMSAN: uninit-value in aiorwdone fs/aio.c:1520 inline BUG: KMSAN:...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: tipc: Changed the nlapolicy for bearer-related names to NLANULSTRING. The syzbot reported the following uninit-value access issues 1: ===================================================== BUG: KMSAN: uninit-value in strlen...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dm raid: Fixing access issues beyond the end of the raid member array When the dm-raid table is loaded using raidctr, dm-raid allocates an array rs-devsrs-raiddisks for the raid device members. rs-raiddisks is determined by the...

libaom:av1_enc_fuzzer: Crash in aom_compute_flow_at_point_c

Detailed Report: https://oss-fuzz.com/testcase?key=5864737481752576 Project: libaom Fuzzing Engine: libFuzzer Fuzz Target: av1encfuzzer Job Type: libfuzzermsanlibaom Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7d321e1b7190 Crash State: aomcomputeflowatpointc...

wasm3:fuzzer: Check failed in CheckUnwind

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5365760529334272 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: Check failed Crash Address: Crash State: CheckUnwind...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed an uninitialized value in ‘ext4evict inode’. Syzbot identified the following issue: ===================================================== BUG: KMSAN: Uninitialized value in ext4evict inode+0xdd/0x26b0,...

openSUSE 16 Security Update : htop (openSUSE-SU-2026:21585-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21585-1 advisory. Changes in htop: - Update to version 3.5.3: Improve the htoprc settings parser to avoid segfaults on tampered configuration files sanitised sort keys,...

graphicsmagick:coder_HEIF_fuzzer: Use-of-uninitialized-value in parse_sps_for_avcC_configuration

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6268196932616192 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099728 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix an uninit variable access bug in qrtrtxresume Syzbot reported a bug as following:...

selinux:selabel_file_text-fuzzer: Segv on unknown address in pcre2_jit_match_8

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4683859900563456 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: selabelfiletext-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Segv on unknown address Crash...

CVE-2026-68169 mptcp: pm: userspace: fix use-after-free in get_local_id

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in getlocalid In mptcppmuserspacegetlocalid, the address entry is looked up under spinlock, but its id is read after dropping the lock. A concurrent deletion can free the entry between the...

mruby:mruby_fuzzer: Check failed in CheckUnwind

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4712963353935872 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Check failed Crash Address: Crash State: CheckUnwind...

selinux:selabel_file_text-fuzzer: Use-of-uninitialized-value in libpcre2-8.so.0

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5076438584459264 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: selabelfiletext-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

php:php-fuzz-parser: Use-of-uninitialized-value in zend_get_compiled_lineno

Detailed Report: https://oss-fuzz.com/testcase?key=5443241508667392 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zendgetcompiledlineno getfilenamelineno...

CVE-2026-64452

CVE-2026-64452 (Linux kernel 6LoWPAN) involves a race condition in 6LoWPAN’s Next Header Compression (NHC) handling that can cause a use-after-free in lowpan_nhc_do_uncompression when an NHC descriptor is freed while another path accesses nhc->name in an error path. The issue arises from holdi...

CVE-2026-64360 hfs/hfsplus: zero-initialize buffer in hfs_bnode_read

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfsbnoderead hfsbnoderead can return early without writing to the output buffer when isbnodeoffsetvalid fails or when checkandcorrectrequested length corrects the length to zero. Callers suc...