Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ath9khtc: fixed uninitialized values issues Syzbot reported 2 KMSAN bugs in ath9k. All of these bugs are caused by missing field initialization. In htcconnectservice, svcmetalen and pad are not initialized. Based on the code, ...

CVE-2026-74710

In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AFXDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the...

CVE-2026-74710

CVE-2026-74710 is an out-of-bounds read in the Linux kernel's AF_XDP (xsk) component. The mechanism accepts a TX metadata length as small as eight bytes, but every supported request requires the flags field plus at least one eight-byte request field (16 bytes minimum). When metadata shorter than ...

PT-2026-79715

In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF XDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the...

EUVD-2020-29819

Malware in sbrugna...

SUSE CVE-2022-49235

In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix uninit value bugs Syzbot reported 2 KMSAN bugs in ath9k. All of them are caused by missing field initialization. In htcconnectservice svcmetalen and pad are not initialized. Based on code it looks like in current sk...

DEBIAN-CVE-2022-49235

In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix uninit value bugs Syzbot reported 2 KMSAN bugs in ath9k. All of them are caused by missing field initialization. In htcconnectservice svcmetalen and pad are not initialized. Based on code it looks like in current sk...

SUSE CVE-2023-50186

GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may...

Yubico YubiHSM 2 SDK Buffer Error Vulnerability

Yubico YubiHSM is a solution from Yubico Inc. for protecting Certificate Authority root keys from being copied by attackers, malware and malicious insiders. A security vulnerability exists in Yubico YubiHSM 2 SDK 2023.01 and earlier versions, which stems from the PKCS11 module failing to correctl...

CVE-2020-8989

In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on the different lengths of the metadata across the available voting choices, which makes it easier for remote attackers to discover this voter's choice by sniffing the network. Fo...