Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/9p: A dedicated spinlock is used for transfd. I'm shamelessly copying the explanation from Tetsuo Handa’s suggested patch1 slightly reworded: syzbot reports inconsistent lock states in p9reqput2. For p9tagremove, when execute...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: 9p: Fixed the fid refcount leak in v9fsvfsgetlink. We now check for protocol versions that are later than required, after a fid has been obtained. Simply move the version check to an earlier stage...

CVE-2026-63795

In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9clientwalk error path When p9clientwalk is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request has been sent, the error path jumps to clunkfid, which...

CVE-2026-63795 9p: avoid putting oldfid in p9_client_walk() error path

In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9clientwalk error path When p9clientwalk is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request has been sent, the error path jumps to clunkfid, which...

CVE-2026-63795

In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9clientwalk error path When p9clientwalk is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request has been sent, the error path jumps to clunkfid, which...

PT-2026-61111

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the 9p filesystem implementation where the p9 client walk function incorrectly handles file identifiers fids during error paths. When the function is called with the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: 9p: The access mode flags were OR-ed instead of replaced. Since the commit 1f3e4142c0eb “9p: Convert to the new mount API”, v9fsapplyoptions applies the parsed mount flags with |= to those flags that have already been set by...

CVE-2026-52906

In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being ORed instead of replaced Since commit 1f3e4142c0eb "9p: convert to the new mount API", v9fsapplyoptions applies parsed mount flags with |= onto flags already set by v9fssessioninit. For 9P2000.L,...

CVE-2026-52906 9p: fix access mode flags being ORed instead of replaced

In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being ORed instead of replaced Since commit 1f3e4142c0eb "9p: convert to the new mount API", v9fsapplyoptions applies parsed mount flags with |= onto flags already set by v9fssessioninit. For 9P2000.L,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021528)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021528 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p: set req refcount to zero to avoid uninitialized usage When a new request is allocated, the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013739)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013739 advisory. In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as below: general...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007620)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007620 advisory. In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as below: general...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006629 advisory. In the Linux kernel, the following vulnerability has been resolved: net: 9p: fix refcount leak in p9readwork error handling p9reqput need to be called when...

Linux 9p trans_fd buffer overflow DoS

The vulnerability of the p9readwork function in the net/9p/transfd.c module of the Linux kernel is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux 9P Protocol Heap Buffer Overflow DoS

The vulnerability of the p9tagalloc function in the net/9p/client.c module of the 9P protocol implementation in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Linux 9p Transient DoS

The vulnerability of the p9fdrequest function in the net/9p/transfd.c component of the Linux kernel is related to errors during thread blocking. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux 9P Protocol Heap Buffer Overflow DoS

The vulnerability of the usb9pfsrxComplete function in the net/9p/transusbg.c module of the 9P protocol implementation in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability cou...

Linux 9P Protocol Heap Buffer Overflow DoS

The vulnerability of the p9fdopen function in the net/9p/transfd.c module of the 9P protocol implementation in Linux’s operating system is related to uncontrolled use of file descriptors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux - уязвимость в linux-6.12

In the Linux kernel, the following vulnerability has been resolved: 9p/transfd: p9fdrequest: kick rx thread if EPOLLIN p9readwork doesn't set Rworksched and doesn't do scheduleworkm-rq if listempty&m-reqlist. However, if the pipe is full, we need to read more data and this used to work prior to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993034 advisory. In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix a potential socket leak in p9socketopen Both p9fdcreatetcp and p9fdcreateunix will ca...