Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fixed a possible Use-after-Allocation UAF condition when ibmpexregisterbmc fails. A warning message was generated as follows: drivers/hwmon/ibmpex.c:509: Error message from ibmpexregisterbmc: “&data-list” was not...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fixed a use-after-free when registering the uncore PMU. When we fail to register the uncore PMU, the PMU context may not be allocated. Handling this error will call cpuhpstateremoveinstance, which calls the uncore PMU...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Platform/x86: intelpmccore – Fixed a memory leak that occurred during registration failures. In cases where device registration fails during module initialization, the platformdevice structure must be freed using...

AZL-96258 CVE-2026-74543 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: udptunnel: fix memory leak in udptunnelnicunregister syzbot reported a memory leak 1 in the UDP tunnel NIC offload code. When device registration fails e.g. in registernetdevice, netdev core unwinds by sending a single...

PT-2026-72672

In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure comp register videodev allocates a video device with video device alloc and releases it if video register device fails. This can double free the video device when...

EUVD-2026-55415

In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with i3cforeachbuslockedmctpi3cbusaddnew, NULL before registering the I3C device...

CVE-2026-68314 net: mctp i3c: clean up notifier and buses if driver register fails

In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with i3cforeachbuslockedmctpi3cbusaddnew, NULL before registering the I3C device...

USB: ulpi: fix memory leak on registration failure

...

SUSE CVE-2026-64279

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their id using i2cgetadapter which takes a reference to the embedded struct device. Remove the adapter from the IDR before tearing it down during...

SUSE CVE-2026-64332

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

SUSE CVE-2026-64471

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected. This...

CVE-2026-64471

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected. This...

CVE-2026-64332

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

AZL-93569 CVE-2026-64332 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

CVE-2026-64279

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their id using i2cgetadapter which takes a reference to the embedded struct device. Remove the adapter from the IDR before tearing it down during...

CVE-2026-64471

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected. This...

UBUNTU-CVE-2026-64279

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their id using i2cgetadapter which takes a reference to the embedded struct device. Remove the adapter from the IDR before tearing it down during...

CVE-2026-64332

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

UBUNTU-CVE-2026-64332

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

UBUNTU-CVE-2026-64509

In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build still has fallible work after blkmqallocdisk, but its error path only recovers the foreign queue data. That leaks the temporary gendisk and requestqueue until later...