Linux Kernel Security Vulnerabilities

Versions of the Linux kernel from 6.18.34 to 6.18.56, as well as 7.0.11 to 7.1 and 7.1 itself, have security vulnerabilities. These vulnerabilities stem from the fprobe processing program executing when RCU does not monitor it. The standard RCU grace period does not wait for these executions, and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities arise from modifying the bind file that is published via RCU while clearing expired local sources. When reading the path without locking, it is possible to observe torn IPv6 addresses, leading to address...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792243434)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792243434 advisory. - In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4706-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4706-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - net: Restricted SOREUSEPORT option for inet sockets. After the bug was identified, it was discovered that crypto sockets could accidentally be destroyed due to RCU callbacks, as noted by zyzbot 1. Attempting to acquire a mut...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - BPF: The rcureadlockTraceheld function in bpfmaplookuppercpuelem needs to be checked. The bpfmaplookuppercpuelem helper function is also available for sleepable BPF programs. When BPF JIT is disabled or on a 32-bit host,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The can: bcm code allows for the deferring of the rxop deallocation to the workqueue to fix a thrtimer UAF. The commit f1b4e32aca08 “can: bcm: use callrcu instead of the costly synchronizercu” replaces the synchronizercu in...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed a UAF by restoring the RCU-delayed inode during bpfanyput. The commit “4f375ade6aa9” “bpf: Avoid RCU context warnings when unpinning htab with internal structs” moved the inode cleanup from -freeinode to...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mctp: Route lookups now perform under a RCU read-side lock. Our current route lookups mctproutelookup and mctproutelookupnull traverse the network’s route list without holding the RCU read lock. This means that the route lookups...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ftrace: Fixed a use-after-free issue related to dynamic ftraceops. KASAN reported a use-after-free when using ftrace. It was discovered that perf registered two ftrace operations with the same content, both being dynamic. Afte...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfrm: State: fixed an out-of-bounds read during lookup. Lookup and resizing can operate in parallel. The xfrmstatehashgenerationseqlock ensures a retry mechanism; however, the hash functions may encounter a hmask value that is to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The issue involves bcm: adding missing rcu read protection for procfs content. When the procfs content is generated for a bcmop that is about to be removed, the procfs output might display unreliable data UAF. Since the removal o...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables – Release flowtable after the rcu grace period with an error. The function synchronizercu is called after unregistering the hooks from the error path. This is because a hook that already references this...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net/sched: fqpie: prevent dismantle issue For some reason, the fqpieDestroy function did not copy the working code from pieDestroy and other related functions, resulting in a persistent bug. Before calling...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering. This ensures that any RCU readers traversing the instance list have completed their operations before releasing the reference to the tracer that the instance points to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Fou: Fixed the null-ptr-deref in GRO. We observed a null-ptr-deref in fougroreceive while shutting down a host. 0 The NULL pointer is sk-skuserdata, and the offset 8 represents the protocol field in the struct fou structure. When...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proccpusetshow A UAF can occur when reading /proc/cpuset, as reported in 1. This issue can be reproduced using the following methods: 1. Add an mdelay1000 before acquiring the cgrouplock in the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: Report the quiescent states of RCU-tasks in shrinklruvec. I have observed some stalls of RCU-tasks during the reclaim process in the Meta fleet. Info: RCU-tasks detected stalls on tasks: 0000000088620d09: .. nvcsw:...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: SUNRPC: Fixed a suspicious RCU usage warning I received the following warning while running cthon on an Ontap server running pNFS: 57.202521 ============================= 57.202522 WARNING: Suspicious RCU usage 57.202523...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Ceph: The dadd function only calls dadd, provided that the dentry is not already hashed. Ceph can call dadddentry, NULL on a negative dentry that already exists in the primary dcache hash. The current VFS implementation is not...