Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iomap: Handling of pages released with an atomic dio size mismatch If the bioiovitergetpages function or the bounce helper succeeds, but a short bio is created, the REQATOMIC size check rejects the request before submission. The...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Fixed a race condition between LPI release and re-registration Fixed a potential race condition where decrementing an LPI’s reference count and evicting that structure from the LPI xarray occur simultaneously. L...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: sched/psi: The use of kernfs polling functions for PSI trigger polling was incorrect. Destroying the psitriggerdestroy in cgroupfilerelease causes a Use-After-Free UAF issue when a cgroup is removed from a polling process. This...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: sunrpc: The lifecycle of rqprocinfo has been hardened to prevent double-free operations. The svcreleaserqst function executes the callback within rqstp-rqprocinfo-pcrelease. However, if a worker thread begins processing a new...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: nvmem: core: fix cleanup after devsetname If devsetname fails, we may leak nvmem-wpgpio because the cleanup does not handle it properly. While a minimal fix would be to add the gpiodput call, we can improve the situation by...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

CVE-2026-74730

A flaw was found in the Linux kernel's Network File System NFS. This vulnerability involves improper memory handling where a critical data structure is released prematurely if a FREESTATEID operation is delayed. This can lead to memory corruption, potentially causing system instability or a denia...

The vulnerability of the usbio_probe() function in the drivers/usb/misc/usbio.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the usbioprobe function in the drivers/usb/misc/usbio.c file of the Linux device driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the amdgpu_acpi.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdgpuacpi.c component in the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the amdgpu_ras.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the amdgpuras.c component in the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `net/l2tp/l2tp_core.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/l2tp/l2tpcore.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/misc/uacce/uacce.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/misc/uacce/uacce.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bnxt component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bnxt component in the Linux operating system’s kernel is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the jh7110-aes.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the jh7110-aes.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the btrfs_sync_file() function in the include/trace/events/btrfs.h module of the Linux kernel allows a malicious actor to access protected information or cause service failures.

The vulnerability of the btrfssyncfile function in the include/trace/events/btrfs.h module of the Linux kernel stem from improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...

Vulnerability of RDMA/iwcm components of the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of RDMA/iwcm components in Linux operating systems is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260824-73-0027

The vulnerability in gpac is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the amdgpu_gmc.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdgpugmc.c component in the Linux operating system is related to the release of an incorrect pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `soup-server-connection.c` component of the LibSoup library allows a attacker to cause a service failure.

The vulnerability of the soup-server-connection.c component in the LibSoup access library is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...