243 matches found
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: accel/amdxdna: Fixed the issue of NULL pointer dereferencing of mgmtchann. mgmtchann may be set to NULL if the firmware returns an unexpected error in the ai2sendmgmtmsgwait function. This can later lead to NULL pointer...
Astra Linux – vulnerability in linux-6.12, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix race condition access at PCM trigger The PCM trigger callback in the aloop driver attempts to check the PCM state and stop the stream of the tied substream on the corresponding audio cable. Since both the check a...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing NULL checks for kstrdup 1. Replace “offindnodebypath"/" with “ofroot” to prevent multiple calls to “ofnodeput”. 2. Fix a potential kernel oops that occurs during early boot when memory allocation fails whil...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Add NULL checks when resetting request and reply queues The driver encountered a crash during resource cleanup when the reply and request queues were NULL due to freed memory. This issue occurred when the creation o...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: octeonepvf: add NULL check for napibuildskb napibuildskb can return NULL upon allocation failure. In octepVFoqprocessrx, the result is used directly without a NULL check in both the single-buffer and multi-fragment paths, resulti...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Wifi: RSI: Do not configure WoWlan in the shutdown hook if it is not enabled. If WoWlan was never configured during the operation of the system, hw-wiphy-wowlanconfig will be NULL. The rsiconfigwowlan function checks whether...
kernel: ipv6: add NULL checks for idev in SRv6 paths
A flaw was found in the Linux kernel. Missing null pointer checks in the IPv6 Segment Routing SRv6 implementation, specifically within the seg6hmacvalidateskb and ipv6srhrcv functions, can occur when an IPv6 device lacks proper configuration. This oversight may allow an attacker to trigger a null...
CVE-2026-64586 wifi: brcmfmac: drain bus_reset work on device removal
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs "reset" entry both schedule drvr-busreset, whose callback recovers drvr through containerof and dereferences it. The removal path frees drvr...
GHSA-4R9R-4425-74P7 Cedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities
Summary CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. Under certain circumstances, it could lead to incorrect equality comparisons. Impact EntityIdentifier.equals has inverted null/self branches The...
SUSE CVE-2026-64510
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc object to the acpidescs list, that object is never removed from that list because the acpinfitshutdown devm action is not added for...
CVE-2026-64488
In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. In layout.c, the function does not check the return value before dereferencing ctl-id.name or passing to aoasndctladd, which can le...
CVE-2026-64510 ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc object to the acpidescs list, that object is never removed from that list because the acpinfitshutdown devm action is not added for...
CVE-2026-64510
CVE-2026-64510 affects the Linux kernel and concerns the ACPI NFIT core. The vulnerability arises when acpi_nfit_init() fails after adding an acpi_desc to the acpi_descs list or when certain probe/update paths do not register a proper shutdown/remove path. This can lead to a use-after-free in nfi...
EUVD-2026-48854
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc object to the acpidescs list, that object is never removed from that list because the acpinfitshutdown devm action is not added for...
Linux Distros Unpatched Vulnerability : CVE-2026-64227
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: driver: Check ACPICOMPANION against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device ID...
PT-2026-64731
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPI NFIT core where improper error cleanup in the acpi nfit init function can lead to a use-after-free condition. If acpi nfit init fails after adding an acpi des...
EUVD-2026-48635
In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPICOMPANION against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, platform drivers that rely on...
CVE-2026-64227 ACPI: driver: Check ACPI_COMPANION() against NULL during probe
In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPICOMPANION against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, platform drivers that rely on...
PT-2026-64342
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Certain platform drivers handling core ACPI devices fail to verify the presence of a device's ACPI companion object during the probe process. Because device match driver override can for...
Linux Distros Unpatched Vulnerability : CVE-2026-63973
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mana: Add NULL guards in teardown path to prevent panic on attach failure When queue allocation fails partway through, the error cleanup frees and NULLs...