Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: nfp: flower: Fixed a potential leak in nfptunneladdsharedmac. idasimpleget returns an ID that is between min 0 and max NFPMAXMACINDEX, including both values. Therefore, NFPMAXMACINDEX 0xff is a valid ID. For the error handling...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hexadecimal numbers or similar elements. However,...

CVE-2026-68328

A flaw was found in the Linux kernel's nfp driver. When allocating a resource mutex, the nfpcppmutexalloc function can return a NULL pointer on failure. However, the nfpcppresourcefind function might still report success, leading to a subsequent attempt to dereference the NULL pointer by...

DEBIAN-CVE-2026-68328

In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfpcppresourcefind allocates a CPP mutex handle for the matching resource-table entry and then reports success. nfpresourcetryacquire immediately passes that handle to nfpcppmutextrylock...

UBUNTU-CVE-2026-68328

In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfpcppresourcefind allocates a CPP mutex handle for the matching resource-table entry and then reports success. nfpresourcetryacquire immediately passes that handle to nfpcppmutextrylock...

CVE-2026-68328

In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfpcppresourcefind allocates a CPP mutex handle for the matching resource-table entry and then reports success. nfpresourcetryacquire immediately passes that handle to nfpcppmutextrylock...

EUVD-2026-55429

In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfpcppresourcefind allocates a CPP mutex handle for the matching resource-table entry and then reports success. nfpresourcetryacquire immediately passes that handle to nfpcppmutextrylock...

CVE-2026-68328 nfp: Check resource mutex allocation

In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfpcppresourcefind allocates a CPP mutex handle for the matching resource-table entry and then reports success. nfpresourcetryacquire immediately passes that handle to nfpcppmutextrylock...

Linux Distros Unpatched Vulnerability : CVE-2026-68328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfp: Check resource mutex allocation nfpcppresourcefind allocates a CPP mutex handle for the matching resource-table entry and then reports success...

CLSA-2026-1779434490 kernel: Fix of 100 CVEs

tracing: Verify event formats that have "%p.." CVE-2025-37938 - HID: pidff: Fix null pointer dereference in pidfffindfields CVE-2025-37862 - scsi: st: Fix array overflow in stsetup CVE-2025-37857 - drm/amdkfd: debugfs hanghws skip GPU with MES CVE-2025-37853 - mm/vmscan: don't try to reclaim...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nfp: flower: handling of actinetdevs allocation failures The kmallocarray function in nfpfllagdowork will return null if physical memory runs out. As a result, if we dereference actinetdevs, null pointer dereferencing bugs may...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nfp: Fixed a memory leak in nfpcppareacacheadd. In line 800 1, nfpcppareaalloc allocates and initializes a CPP area structure. However, in line 807 2, when the cache allocation fails, this CPP area structure is not freed, resulti...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005145 advisory. In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructe...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2019-19076)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-19076 advisory. - A memory leak in the nfpabmu32knodereplace function in drivers/net/ethernet/netronome/nfp/abm/cls.c ...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27046)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27046 advisory. - In the Linux kernel, the following vulnerability has been resolved: nfp: flower: handle actinetdevs...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004134 advisory. A memory leak in the nfpflowerspawnvnicreprs function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004043)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004043 advisory. A memory leak in the nfpabmu32knodereplace function in drivers/net/ethernet/netronome/nfp/abm/cls.c in the Linux kernel before 5.3.6 allows attackers to cause a deni...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004020)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004020 advisory. Four memory leaks in the nfpflowerspawnphyreprs function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to caus...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003864)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003864 advisory. Four memory leaks in the nfpflowerspawnphyreprs function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to caus...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004019)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004019 advisory. A memory leak in the nfpflowerspawnvnicreprs function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause ...