Astra Linux – Vulnerability in Linux 5.15, Linux

In the Linux kernel, the following vulnerability has been resolved: erofs: Fix for pcluster use-after-free on UP platforms During stress testing with CONFIGSMP disabled, KASAN reports the following issue: ================================================================== BUG: KASAN: Use-after-fre...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053321 advisory. In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms During stress testing with CONFIGSMP disabled,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: EROFs: Avoid linking hooked chains to prevent loops in deduplicated compressed images. After subjecting EROFS to heavy stress using several images that included a handcrafted image with repeated patterns for over 46 days, I...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-3515 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-3515 Source advisory: OSV:PYSEC-2026-2957...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-7722 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-7722 Source advisory: OSV:PYSEC-2026-2956...

archimedes-flow-utils (>=1.0.4, <=1.1.8), archimedes-python-client (>=3.4.0, <=3.8.1) +10 more potentially affected by CVE-2026-7724 via prefect (1.4.1)

prefect PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - archimedes-flow-utils =1.0.4, =3.4.0, =0.1.0, =1.0.21, =0.1.0, =0.0.0b1, =0.2.1, =0.0.0, =2021.12.16, =2021.12.17 Source cves: CVE-2026-7724 Sourc...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-7724 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-7724 Source advisory: OSV:PYSEC-2026-2959...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-7723 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-7723 Source advisory: OSV:PYSEC-2026-2958...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-7725 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-7725 Source advisory: OSV:PYSEC-2026-2955...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2024-8183 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2024-8183 Source advisory: OSV:PYSEC-2026-1800...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-3514 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-3514 Source advisory: OSV:GHSA-C635-393C-HCX2...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-3514 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-3514 Source advisory: OSV:PYSEC-2026-2261...

AZL-88422 CVE-2026-45943 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: erofs: fix inline data read failure for ztailpacking pclusters Compressed folios for ztailpacking pclusters must be valid before adding these pclusters to I/O chains. Otherwise, zerofsdecompresspcluster may assume they are alread...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-3515 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-3515 Source advisory: OSV:GHSA-CW25-2P92-7F75...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: erofs: Fixed a memory leak when the block address of a non-inlined pcluster is zero. Syzkaller reported a memory leak: https://syzkaller.appspot.com/bug?id=62f37ff612f0021641eda5b17f056f1668aa9aed Unreferenced object...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-7725 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-7725 Source advisory: OSV:GHSA-6RCX-55R6-JX65...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-7723 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-7723 Source advisory: OSV:GHSA-HVPH-5985-R63V...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-7724 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-7724 Source advisory: OSV:GHSA-P3PQ-HXMR-VQQR...

aws-pcluster-helpers (>=1.0.17, <=1.0.20) potentially affected by CVE-2026-7722 via prefect (1.0.0)

prefect PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - aws-pcluster-helpers =1.0.17, =1.0.20 Source cves: CVE-2026-7722 Source advisory: OSV:GHSA-6RR6-V7CJ-MXPG...

SUSE CVE-2022-50743

In the Linux kernel, the following vulnerability has been resolved: erofs: Fix pcluster memleak when its block address is zero syzkaller reported a memleak: https://syzkaller.appspot.com/bug?id=62f37ff612f0021641eda5b17f056f1668aa9aed unreferenced object 0xffff88811009c7f8 size 136: ... backtrace...