Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: use devmgpiochipadddata for GPIO chip The gpiochip is allocated with device-managed memory but registered with the non-managed gpiochipadddata. This was harmless while the drivers were built-in; however, once...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fixed esdhcchangepinstate, allowing the default state to be restored. The esdhcchangepinstate function checks for pins100mhz and pins200mhz at the beginning of the function. If either is not defined, it...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: gpio: tegra: do not call pinctrl for GPIO direction tegragpiodirectioninput and tegragpiodirectionoutput already program the GPIO controller direction registers directly. The additional pinctrlgpiodirectioninput/output calls do n...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Do not remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure,...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: free EINT resources on unbind mtkeintdoinit creates an IRQ domain, populates it with a mapping for every EINT line, and installs a chained handler on the parent interrupt; however, none of these resources are...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146296)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146296 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicate...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143052)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143052 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: ocelot: fix system hang on level based interrupts The current implementation only calls...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142469 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicate...

CLSA-2026-1775779453 Fix of 119 CVEs

CVE-2025-39743 - jfs: truncate good inode pages when hard link is 0 CVE-2025-39743 CVE-2025-39685 - comedi: pcl726: Prevent invalid irq number CVE-2025-39685 CVE-2025-38713 - hfsplus: fix slab-out-of-bounds read in hfsplusuni2asc CVE-2025-38713 CVE-2025-38699 - scsi: bfa: Double-free fix...

CVE-2026-92482

A flaw was found in the Linux kernel's pinctrl Mediatek driver. This vulnerability occurs because the gpiochip memory is freed prematurely while it is still registered, leading to a use-after-free condition. This can happen when the driver is built as a module and then unloaded. A local attacker...

CVE-2026-92481

A flaw was found in the Linux kernel's pinctrl: mediatek driver. When the driver is unloaded, it fails to properly release External Interrupt EINT resources. This oversight can result in the system attempting to access memory that has already been freed, potentially leading to system instability ...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43pinprobe devmaddactionorreset already invokes the action on failure, so the explicit put causes a double-put...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: pinctrl: equilibrium: fix warning trace on load The callback functions ‘eqbrirqmask’ and ‘eqbrirqack’ are also called in the callback function ‘eqbrirqmaskack’. This is done to avoid source code duplication. The problem is that i...

CLSA-2024-1725872696 kernel: Fix of 43 CVEs

netfilter: nftables: use timestamp to check for set element timeout CVE-2024-27397 - x86/sev: Harden VC instruction emulation somewhat CVE-2024-25742 - bpf: Avoid uninitialized value in BPFCOREREADBITFIELD CVE-2024-42161 - selftests/bpf: Fix BPFCOREREADBITFIELD macro CVE-2024-42161 - pinctrl:...

CLSA-2026-1770032032 kernel: Fix of 63 CVEs

mm/memory-failure: fix VMBUGONPAGEPagePoisonedpage when unpoison memory CVE-2025-39883 - comedi: aioiiro16: Fix bit shift out of bounds CVE-2025-38529 - comedi: das6402: Fix bit shift out of bounds CVE-2025-38482 - comedi: pcl812: Fix bit shift out of bounds CVE-2025-38530 - comedi: das16m1: Fix...

CLSA-2024-1725876080 kernel: Fix of 45 CVEs

dmaengine: idxd: Fix possible Use-After-Free in irqprocessworklist CVE-2024-40956 - userfaultfd: fix a race between writeprotect and exitmmap CVE-2021-47461 - netfilter: nftables: use timestamp to check for set element timeout CVE-2024-27397 - x86/sev: Harden VC instruction emulation somewhat...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131785)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131785 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: ocelot: fix system hang on level based interrupts The current implementation only calls...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: wpcm450: fix an out-of-bounds write issue. The write operation to ‘pctrl-gpiobank’ occurs before the check for the validity of the GPIO index, which may lead to an out-of-bounds write. This issue was detected by...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fixed null pointer dereferencing in pinctrldttomap Here is the BUG report by KASAN regarding null pointer dereferencing: BUG: KASAN: nullptrderef in strcmp+0x2e/0x50 A read of size 1 was performed at address...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: pinctrl: ralink: Check for null return of devmkcalloc Due to the potential failure of the allocation, data-domains might be a NULL pointer, which could lead to dereferencing of that NULL pointer later on. Therefore, it may be...