ROS-20260923-73-0057

The vulnerability of the chachacryptarch function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Fixed a race condition between enabling/disabling SR-IOV and hot-plug events. The commit 05703271c3cd “PCI/IOV: Added locking for PCI rescan and removal when enabling/disabling SR-IOV” attempted to address the race...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix in setting the fpc register The function kvmarchvcpuioctlsetfpu allows for setting the floating-point control fpc register of a guest CPU. The new value is tested for validity by temporarily loading it into the fpc...

Linux kernel S390 DoS

The vulnerability in the dosyscall function within the arch/s390/kernel/syscall.c module for the S390 platform in the Linux kernel is related to insufficient input validation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

CVE-2026-52968

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic kvms390pciaifenable, kvms390pciaifdisable, and aenhostforward index the GAIT by manually multiplying the index with sizeofstruct zpcigaite. Since...

SUSE-SU-2026:21845-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 bsc1243603. - CVE-2024-14027: xattr: switch to CLASSfd bsc1259420. - CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when...

SUSE-SU-2026:21860-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 bsc1243603. - CVE-2024-14027: xattr: switch to CLASSfd bsc1259420. - CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fixed memory corruption when using the identity domain. The function zpcigetiommuctrs returns counter information that needs to be reported as part of device statistics. These counters are stored as part of the...

Linux S390 Network Driver Buffer Overflow DoS

The vulnerabilities of the functions ismcmd and ismprobe in the drivers/s390/net/ismdrv.c file of the S390 network driver for the Linux operating system are related to state management errors. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

Linux S390 chacha_crypt_arch Buffer Overflow DoS

The vulnerability of the chachacryptarch function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...

Linux S390 Platform Buffer Overflow DoS

The vulnerability of the functions archduptaskstruct and copythread in the arch/s390/kernel/process.c module, which is part of the S390 platform support for the Linux operating system, relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker t...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004121 advisory. In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enablesacfuaccess in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000953 advisory. The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page- table levels, which allows local users to cause a denial o...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004405 advisory. In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enablesacfuaccess in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001819)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001819 advisory. arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACEPOKEUSRAREA...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002877 advisory. The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page- table levels, which allows local users to cause a denial o...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001798 advisory. The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page- table levels, which allows local users to cause a denial o...

CVE-2025-68790

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix double unregister of HCAPORTS component Clear hcadevcomcomp in device's private data after unregistering it in LAG teardown. Otherwise a slightly lagging second pass through mlx5unloadone might try to unregister it...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000336)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000336 advisory. In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enablesacfuaccess in...

CVE-2023-53746

CVE-2023-53746 relates to a memory leak in the s390/vfio-ap device driver of the Linux kernel. The release path freed the vfio_matrix_dev memory by calling kfree, but the object is not stored as drvdata for the device; the code then relies on null pointer handling, causing the vfio_matrix_dev mem...