Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: Fixed the null-pointer dereference in pgtablecacheadd. kasprintf returns a pointer to dynamically allocated memory; this pointer may be NULL in case of failure. Ensure that the allocation was successful by checking th...

The vulnerability of the pte_fragDestroy() function in the arch/powerpc/mm/pgtable-frag.c module of the PowerPC platform in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ptefragDestroy function in the arch/powerpc/mm/pgtable-frag.c module of the Linux operating system’s PowerPC platform is related to the state of the race condition when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the __arm_lpae_unmap() function in the drivers/iommu/io-pgtable-arm.c file of the Linux operating system’s IOMMU driver allows a hacker to trigger a service failure.

The vulnerability of the armlpaeunmap function in the drivers/iommu/io-pgtable-arm.c file of the Linux operating system’s IOMMU driver is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the kernel_pgtable_work_func() function in the mm/pgtable-generic.c module, and the iommu_svaBindDevice() function in the drivers/iommu/iommu-sva.c module of the Linux operating system’s IOMMU driver, allows a attacker to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the iommuallocmmdata function in the drivers/iommu/iommu-sva.c module of the Linux IOMMU driver is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

CVE-2026-68212

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it fails, the function continues as if successful, leaving the driver with...

EUVD-2026-55313

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it fails, the function continues as if successful, leaving the driver with...

CVE-2026-68212 media: saa7134: Fix a possible memory leak in saa7134_video_init1

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it fails, the function continues as if successful, leaving the driver with...

CVE-2026-68212

The CVE affects the Linux kernel driver media: saa7134, specifically saa7134_video_init1. The issue is a memory leak risk caused by missing return-value checks on two saa7134_pgtable_alloc() calls and incomplete error handling when vb2_queue_init() for the VBI queue fails. If a pgtable allocation...

CVE-2026-63953

A flaw was found in the Linux kernel's memory management component, specifically within the mm/migratedevice module. When handling device page migration, a page table pgtable allocated during the migratevmainserthugepmdpage function may not be properly freed if a specific error condition occurs...

SUSE CVE-2026-63953

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...

CVE-2026-63953

CVE-2026-63953 concerns a Linux kernel memory-leak after migrate_vma_insert_huge_pmd_page() jumps to unlock_abort on PMD check failure. The pgtable allocated via pte_alloc_one() could remain unreleased in the error path, leading to a leak. The fix adds a free_abort path to release the pgtable whe...

CVE-2026-63953 mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...

CVE-2026-63953: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When migratevmainserthugepmdpage jumps to unlockabort due to a PMD check failure, the pgtable allocated earlier via pteallocone is never freed, causing a memory...

AZL-90392 CVE-2026-53109 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: powerpc/pgtable-frag: Fix bad page state in ptefragdestroy powerpc uses ptfragrefcount as a reference counter for tracking it's pte and pmd page table fragments. For PTE table, in case of Hash with 64K pagesize, we have 16...

Unbreakable Enterprise kernel security update

5.15.0-320.202.8.2 - xfrm: esp: ipv4: fix up flags setting Greg Kroah-Hartman Orabug: 39344515 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags Kuan-Ting Chen Orabug: 39344515 CVE-2026-43284 5.15.0-320.202.8.1 - x86/CPU/AMD: Add a fix for AMD-SB-7052 Prathyushi Nangia Orabug...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/msm: Fixed the issue with pgtable prealloc error paths. The following issues were reported: Unable to handle a NULL pointer derefrence at the virtual address 0000000000000010. Memory abort information: ESR =...

The vulnerability of the pgtable_l5_enabled() function in the arch/arm64/include/asm/pgtable.h module allows a hacker to trigger a service failure on the ARM 64-bit kernel-based Linux operating system.

The vulnerability of the pgtablel5enabled function in the arch/arm64/include/asm/pgtable.h module is related to the execution of operations beyond the buffer boundaries in 64-bit ARM processor-based Linux operating systems. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the `pte_user_accessible_page()` function in the `arch/arm64/include/asm/pgtable.h` header, which is part of the ARM 64-bit kernel support for the Linux operating system. This vulnerability allows a malicious actor to cause a service failure.

The vulnerability of the pteuseraccessiblepage function in the arch/arm64/include/asm/pgtable.h header, which is part of the ARM 64-bit kernel support for the Linux operating system, involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerabili...

SUSE CVE-2026-23067

In the Linux kernel, the following vulnerability has been resolved: iommu/io-pgtable-arm: fix sizet signedness bug in unmap path armlpaeunmap returns sizet but was returning -ENOENT negative error code when encountering an unmapped PTE. Since sizet is unsigned, -ENOENT typically -2 becomes a huge...

CVE-2026-23067

In the Linux kernel, the following vulnerability has been resolved: iommu/io-pgtable-arm: fix sizet signedness bug in unmap path armlpaeunmap returns sizet but was returning -ENOENT negative error code when encountering an unmapped PTE. Since sizet is unsigned, -ENOENT typically -2 becomes a huge...