PT-2026-122015

In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx usb ms: complete requests after eject instead of dropping them memstick check can pass its host-removing check just before rtsx usb ms drv remove sets eject/removing. Its next request is then silently dropped: rtsx...

PT-2026-122016

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free write occurs in the memstick subsystem when wait for completion timeout expires in the memstick alloc card and memstick set rw addr functions. Because the subsystem...

CLSA-2025-1746479711 kernel-uek: Fix of 225 CVEs

sctp: sysctl: authenable: avoid using current-nsproxy - sctp: sysctl: cookiehmacalg: avoid using current-nsproxy CVE-2025-21640 - bpf: Use preemptcount directly in bpfsendsignalcommon - Revert "sctp: sysctl: cookiehmacalg: avoid using current-nsproxy" - jfs: fix slab-out-of-bounds read in eaget -...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: mmc: rtsxpci: fix return value check of mmcaddhost mmcaddhost may return an error; if we ignore its return value, the memory allocated by mmcallochost will be leaked, leading to a kernel crash due to the removal of a device that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtimeidle callback and the .remove callback in the rtsxpcr PCI driver leads to a kernel crash due to an unhandled page fault 1. The proble...

Astra Linux – Vulnerability in Linux, Linux 5.10

A use-after-free vulnerability was discovered in the rtsxusbmsdrvremove function in the drivers/memstick/host/rtsxusbms.c file within the memstick module of the Linux kernel. In this flaw, a local attacker with user privileges could compromise the confidentiality of system resources. This...

Linux MMC/SD/SDIO rtsx_usb_sdmmc_drv_probe Heap Buffer Overflow DoS

The vulnerability of the rtsxusbsdmmcdrvprobe function in the mmc/host/rtsxusbsdmmc.c driver for MMC/SD/SDIO cards in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50347: mmc: rtsxusbsdmmc: fix return value check of mmcaddhost bsc1249928. CVE-2022-50580: blk-throttle: prevent overflow while calculating wait time bsc1252542...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22020)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22020 advisory. - In the Linux kernel, the following vulnerability has been resolved: memstick: rtsxusbms: Fix slab-use-...

ROS-20260121-73-0024

A vulnerability in the rtsxusbmsdrvremove function of the drivers/memstick/host/rtsxusbms.c component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromis...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2501)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in skbunclonekeeptruesizeCVE-2022-49142...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990430 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990304 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989657)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989657 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the...

AlmaLinux 10 : kernel (ALSA-2025:12662)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:12662 advisory. kernel: padata: fix UAF in padatareorder CVE-2025-21727 kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: HI...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-386565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-386565 advisory. In the Linux kernel, the following vulnerability has been resolved: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove This fixes the following crash...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414504 advisory. A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c in memstick in the Linux kernel. In this flaw, a local attacker...

RLSA-2025:12662 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: padata: fix UAF in padatareorder CVE-2025-21727 kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: HID: intel-ish-hid: Fix use-after-free issue ...

Linux kernel RCE

The vulnerability of the rtsxusbmsdrvremove function in the drivers/memstick/host/rtsxusbms.c file of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause...

UBUNTU-CVE-2022-50347

In the Linux kernel, the following vulnerability has been resolved: mmc: rtsxusbsdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not...