Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: afkey: The function pfkeysendmigrate should validate the families involved in the migration process. syzbot was able to trigger a crash in the skbPut function 1. The issue arises from pfkeysendmigrate, which does not check...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-052340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-052340 advisory. In the Linux kernel, the following vulnerability has been resolved: afkey: validate families in pfkeysendmigrate syzbot was able to trigger a crash in skbput 1 Issue...

CVE-2026-63914: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE notifications to caller's netns xfrmsendmigrate in net/xfrm/xfrmuser.c and pfkeysendmigrate in net/key/afkey.c both hardcode &initnet for the multicast that announces a successful XFRMMSGMIGRATE / SADBXMIGRATE...

AZL-83201 CVE-2026-31515 affecting package kernel for versions less than 6.6.134.1-2

In the Linux kernel, the following vulnerability has been resolved: afkey: validate families in pfkeysendmigrate syzbot was able to trigger a crash in skbput 1 Issue is that pfkeysendmigrate does not check old/new families, and that setipsecrequest @family argument was truncated, thus possibly...

CVE-2026-31515: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: afkey: validate families in pfkeysendmigrate syzbot was able to trigger a crash in skbput 1 Issue is that pfkeysendmigrate does not check old/new families, and that setipsecrequest @family argument was truncated, thus possibly...