PT-2026-114365

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use memset io to clear QLAFX00 request ring slot For QLAFX00 the request ring is ioremapped device I/O memory ha-iobase + req que off, not DMA-coherent RAM, which is why the rest of the FX00 path accesses it throug...

Linux Distros Unpatched Vulnerability : CVE-2026-98386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Use memsetio to clear QLAFX00 request ring slot For QLAFX00 the request ring is ioremapped device I/O memory ha-iobase + reqqueoff, not...

Astra Linux – Vulnerability in ffmpeg

The decodeframe function in libavcodec/exr.c in FFmpeg 4.3.1 has a buffer overflow due to errors in calculating when to perform memset zero operations...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iommu/intel: Fixed an out-of-bounds memset in dmarlatencydisable. The dmarlatencydisable function is intended to set only the single latencystatistic entry for the given type. However, the memset size was calculated as sizeoflsta...

CVE-2026-102757

A vulnerability in ThreadX allows an unprivileged, memory-protected module to gain privileged memory read and write access. The root cause is a flaw in the Module Manager , which incorrectly validates object addresses by only checking if they fall outside the module. An attacker can bypass this b...

CVE-2026-102808 PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

PT-2026-102769

Name of the Vulnerable Software and Affected Versions ThreadX affected versions not specified Description An unprivileged, memory-protected module can force the kernel to read and write memory at arbitrary addresses in privileged mode, allowing the module to clear the MPU Memory Protection Unit...

PT-2026-98113

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the fw pri buf PSP private buffer was handled using open-coded memset and memcpy operations without proper validation. The fix involves...

CVE-2026-93064 wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser iwlmvmfrobtxfkeyiter tracks the last matched byte position in loop variable 'i'. When a full key match is found match == keylen, 'i' points at the last byte of the matched...

EUVD-2026-81893

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as ARGPTRTOUNINITMEM argument and we should initialize the buf on every return path...

CVE-2026-90300

CVE-2026-90300 affects the Linux kernel BPF subsystem, specifically the __bpf_get_task_stack helper used by both bpf_get_task_stack and bpf_get_task_stack_sleepable. The buffer argument is declared as ARG_PTR_TO_UNINIT_MEM, requiring initialization on every return path, but the error/fail paths w...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: In the video:fbdev:arkfb function, the value of screensize is calculated based on user input. If the user provides an incorrect value, the value of screensize may be larger than info-screensize, which may lead to the following bu...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: re-fix fortified-memset warning The carl9170txrelease function sometimes triggers a fortified-memset warning in my build configurations. This issue occurs in the following file: include/linux/string.h:254, and in...

Astra Linux – Vulnerability in u-boot

The U-Boot versions from 2016.09 to 2019.07-rc4 can memset too much data while reading a crafted ext4 filesystem. This results in a stack buffer overflow, potentially leading to code execution...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: s3fb: Check the size of the screen before memsetio In the function s3fbsetpar, the value of ‘screensize’ is calculated based on user input. If the user provides an incorrect value, the value of ‘screensize’ may be...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: sched: actife: initialize struct tcife to fix KMSAN kernel-infoleak. This issue was fixed by using the syzbot tool to detect and address the KMSAN kernel-infoleak. In tcfifedump, the variable ‘opt’ was partially initialized...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: misc/vmwvmci: fixed an infoleak in vmcihostdoreceivedatagram The struct vmcieventqp allocated by qpnotifypeer contains padding, which may carry uninitialized data to the user space, as observed by KMSAN: BUG: KMSAN:...

Astra Linux – Vulnerability in Mariadb 10.3

It was discovered that MariaDB v10.7 contains a use-after-poison issue in the interceptormemset function located at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc...

PT-2026-90275

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the nd label validate function within the libnvdimm/labels component. The nslot field, which is a u32 read from the DIMM label storage area or provided by...

CVE-2026-80638

A flaw was found in the ocfs2 component of the Linux kernel. When a user unlinks a refcounted file whose refcount tree has leaf blocks, an out-of-bounds write occurs within the ocfs2removerefcountextent function. This happens because a memset operation writes past the intended memory boundary due...