1018 matches found
Paranoid-Dirty-Frag-CVE-2026-43284
Dirty Frag mitigation script This script: 1. Blocks vulnerable kernel modules from loading 2. Unloads them if currently active 3. Verifies mitigation status WARNING: Disables Linux IPsec ESP support esp4/esp6 and RxRPC support. This may break: - strongSwan - libreswan - some enterprise VPNs -...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: rxrpc: The removal of calls from the rxnet-calls list was corrected to use listdelrcu instead of listdelinit, to prevent potential infinite loops due to improper handling of the proc.net/rxrpc/calls structure. However, this means...
USN-8919-1 linux, linux-aws, linux-azure, linux-azure-5.4, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Tracing infrastructure; - iouring subsystem; -...
CVE-2026-80885
A flaw was found in the Linux kernel's Andrew File System AFS component. The rxrpc Out-of-Band OOB message handler did not properly cancel its processing. This could lead to the handler continuing to process messages even when the network namespace is no longer active, or mishandling security...
ROS-20261007-73-0212
The vulnerability of the rxrpcserverkeyring function in the net/rxrpc/serverkey.c module, which supports RxRPC session sockets in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service...
ROS-20261007-73-0410
The vulnerability of the rxrpcprocessevent function in the net/rxrpc/connevent.c module, which is related to RxRPC session support in Linux kernel, stems from incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed an oops due to the absence of the prealloc backlog struct. If an AFRXRPC service socket is opened and bound, but the calls are pre-allocated, then rxrpcallocincomingcall will cause an oops because the rxrpcbacklog...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed the race condition related to completed calls. When a call receives an event such as incoming data, the call is placed on the socket’s queue. A thread that is processing recvmsg can be awakened to process this event...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Serialize the kernel’s accept operation with socket teardown. The rxrpckernelchargeaccept function reads rx-backlog without any socket/backlog synchronization, and passes this raw pointer to rxrpcservicepreallocone. A...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: afs: Fixed the callback service message parsers to pass through -EAGAIN. The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the...
Linux Kernel RxRPC DoS
The vulnerability of the rxkadverifyresponse function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow a remote...
Linux RxRPC Buffer Overflow DoS
The vulnerability of the rxkadverifypacket2 function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, stems from insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service...
rxgk_extract_token Heap Buffer Overflow DoS
The vulnerability of the rxgkextracttoken function in the net/rxrpc/rxgkapp.c module, which is part of the RxRPC session support for the Linux operating system’s kernel, stems from an improper check on the returned value by this function. Exploiting this vulnerability could allow a remote attacke...
ROS-20260930-73-0074
The vulnerability of the rxrpcrecvmsg function in the net/rxrpc/recvmsg.c module, which supports RxRPC session sockets in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
ROS-20260929-73-0059
The vulnerability of the rxkaddecryptticket function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, stems from the lack of checking for the return value. Exploiting this vulnerability could allow a remote attacker to compromise...
CVE-2026-97583
In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...
EUVD-2026-86891
In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...
CVE-2026-97583 afs: Clear stale peer app data after address list changes
In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as NULL. Consequently, afssetpeerappdata treats every address list...
PT-2026-98523
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the AFS component of the Linux kernel. The function afs fs probe fileserver fails to properly preserve the old address list when fetching the curren...
Linux Distros Unpatched Vulnerability : CVE-2026-97583
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Clear stale peer app data after address list changes afsfsprobefileserver fetches the current endpoint state under server-fslock, but leaves oldalist as...