Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: Fixed the null-pointer dereference in pgtablecacheadd. kasprintf returns a pointer to dynamically allocated memory; this pointer may be NULL in case of failure. Ensure that the allocation was successful by checking th...

PowerPC Linux pgtable-frag Heap Buffer Overflow DoS

The vulnerability of the ptefragDestroy function in the arch/powerpc/mm/pgtable-frag.c module of the Linux operating system’s PowerPC platform is related to the state of the race condition when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the...

Linux IOMMU Driver Use-After-Free

The vulnerability of the iommuallocmmdata function in the drivers/iommu/iommu-sva.c module of the Linux IOMMU driver is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the armlpaeunmap function in the drivers/iommu/io-pgtable-arm.c file of the Linux operating system’s IOMMU driver is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-68212

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it fails, the function continues as if successful, leaving the driver with...

CVE-2026-68212

The CVE affects the Linux kernel driver media: saa7134, specifically saa7134_video_init1. The issue is a memory leak risk caused by missing return-value checks on two saa7134_pgtable_alloc() calls and incomplete error handling when vb2_queue_init() for the VBI queue fails. If a pgtable allocation...

CVE-2026-68212 media: saa7134: Fix a possible memory leak in saa7134_video_init1

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it fails, the function continues as if successful, leaving the driver with...

EUVD-2026-55313

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it fails, the function continues as if successful, leaving the driver with...

CVE-2026-63953

A flaw was found in the Linux kernel's memory management component, specifically within the mm/migratedevice module. When handling device page migration, a page table pgtable allocated during the migratevmainserthugepmdpage function may not be properly freed if a specific error condition occurs...

SUSE CVE-2026-63953

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...

CVE-2026-63953

A memory leak exists in the Linux kernel within the mm/migrate_device component. The vulnerability occurs in the migrate_vma_insert_huge_pmd_page() function when it jumps to unlock_abort due to a PMD check failure; in this scenario, the pgtable previously allocated via pte_alloc_one() is not free...

CVE-2026-63953 mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...

CVE-2026-63953: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...

AZL-90392 CVE-2026-53109 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: powerpc/pgtable-frag: Fix bad page state in ptefragdestroy powerpc uses ptfragrefcount as a reference counter for tracking it's pte and pmd page table fragments. For PTE table, in case of Hash with 64K pagesize, we have 16...

Unbreakable Enterprise kernel security update

5.15.0-320.202.8.2 - xfrm: esp: ipv4: fix up flags setting Greg Kroah-Hartman Orabug: 39344515 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags Kuan-Ting Chen Orabug: 39344515 CVE-2026-43284 5.15.0-320.202.8.1 - x86/CPU/AMD: Add a fix for AMD-SB-7052 Prathyushi Nangia Orabug...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/msm: Fixed the issue with pgtable prealloc error paths. The following issues were reported: Unable to handle a NULL pointer derefrence at the virtual address 0000000000000010. Memory abort information: ESR =...

pgtable_l5_enabled() ARM64 Kernel DoS

The vulnerability of the pgtablel5enabled function in the arch/arm64/include/asm/pgtable.h module is related to the execution of operations beyond the buffer boundaries in 64-bit ARM processor-based Linux operating systems. Exploiting this vulnerability could allow an attacker to cause a service...

Linux ARM64 Kernel Heap Buffer Overflow DoS

The vulnerability of the pteuseraccessiblepage function in the arch/arm64/include/asm/pgtable.h header, which is part of the ARM 64-bit kernel support for the Linux operating system, involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerabili...

SUSE CVE-2026-23067

In the Linux kernel, the following vulnerability has been resolved: iommu/io-pgtable-arm: fix sizet signedness bug in unmap path armlpaeunmap returns sizet but was returning -ENOENT negative error code when encountering an unmapped PTE. Since sizet is unsigned, -ENOENT typically -2 becomes a huge...

UBUNTU-CVE-2026-23067

In the Linux kernel, the following vulnerability has been resolved: iommu/io-pgtable-arm: fix sizet signedness bug in unmap path armlpaeunmap returns sizet but was returning -ENOENT negative error code when encountering an unmapped PTE. Since sizet is unsigned, -ENOENT typically -2 becomes a huge...