Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fixed out-of-bounds access when there are more than 4 slaves. The commit 571e31fa60b3 “spi: bcm2835: Fixed cache the CS register value for -preparemessage” limited the number of slaves to 3 at compile-time. This...

ROS-20260930-73-0055

The vulnerability of the slaves/w1therm.c component in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-84240

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the informSyncUpgfw function allows unauthenticated attackers to mass-trigger firmware update activity across mesh slaves. This is achieved by sending a crafted...

CVE-2026-51760

Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to mass-trigger firmware update activity across mesh slaves via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69199

Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to mass-trigger firmware update activity across mesh slaves via sending a crafted MQTT message to the csbroker component...

CVE-2026-68201 ALSA: timer: drain a slave's callback before its master detaches it

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its master detaches it sndtimercloselocked drains the closing instance's own in-flight callback IFLGCALLBACK before freeing it, but not its slaves'. When a master instance is closed,...

EUVD-2026-55302

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its master detaches it sndtimercloselocked drains the closing instance's own in-flight callback IFLGCALLBACK before freeing it, but not its slaves'. When a master instance is closed,...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

com.arkea.satd:stoplightio-report (>=2.2.1, <=2.2.5), com.cloudbees.jenkins.plugins:container-slaves (1.0-beta-1) +89 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.609.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.609.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.arkea.satd:stoplightio-report =2.2.1, =0.5, =1.0-beta-2, =1.0, =1.1, =0.14.0, =0.14.0,...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

io.jenkins.docker:docker-plugin (1336.v3711dec712de), io.jenkins.plugins:docker-slaves (259.v43582a_63e8b_9) +4 more potentially affected by CVE-2026-42520 via org.jenkins-ci.plugins:credentials-binding (717.v951d49b_5f3a_a)

org.jenkins-ci.plugins:credentials-binding MAVEN version 717.v951d49b5f3aa is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials-binding and may be impacted: - io.jenkins.docker:docker-plugin 1336.v3711dec712de -...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

com.arkea.satd:stoplightio-report (>=2.2.1, <=2.2.5), com.cloudbees.jenkins.plugins:container-slaves (1.0-beta-1) +89 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.609.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.609.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.arkea.satd:stoplightio-report =2.2.1, =0.5, =1.0-beta-2, =1.0, =1.1, =0.14.0, =0.14.0,...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...