Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: bridge: Fixed a soft lockup issue in brmulticastqueryexpired. When setting multicastqueryinterval to a large value, the local variable time in brmulticastsendquery may overflow. If the time is less than a few milliseconds, t...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoiding soft lockup when using mprotect on a large memory area When calling mprotect on a large hugetlb memory area in our customer’s workload 300GB of hugetlb memory, soft lockup was observed: watchdog: BUG: soft...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ftrace: The soft lockup issue in ftracemoduleenable has been fixed. A soft lockup was observed when loading the amdgpu module. If a module contains many functions that can be traced, multiple calls to kallsymslookup may take too...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Instead of returning -EAGAIN, -ENOMEM is returned if there is not enough headroom. Since the upstream commit e75665dd0968 “wifi: wlcore: ensure skb headroom before skbpush”, wl1271txallocate and wl1271preparetxframe...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: cfg80211: Values of NL80211ATTRTXQQUANTUM are restricted. syzbot can trigger soft lockups by setting NL80211ATTRTXQQUANTUM to 2^31. We had a similar issue in schfq, which was fixed in the commit d9e15a273306 „pktsched: f...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: jbd2: Prevent softlockup in jbd2logdocheckpoint. Both jbd2logdocheckpoint and jbd2journalshrinkcheckpointlist periodically release the jlistlock after processing a batch of buffers to avoid long hold times on the jlistlock...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: USB: class: cdc-wdm: Fixed the CPU lockup caused by excessive log messages. The syzbot fuzzer found that the interrupt-URB completion callback in the cdc-wdm driver took too long. The driver’s immediate resubmission of interrupts...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/ast: Fixed soft lockup issue There is a while-loop in astdpsetonoff, which could lead to an infinite loop. This is because the register, VGACRI-Dx, is checked in this API; it is actually a scratch register controlled by a MCU...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: iommu/arm-smmu-v3: Fixed the soft lockup triggered by armsmmumminvalidaterange. When running an SVA case, the following soft lockup is triggered: -------------------------------------------------------------------- watchdog:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fixed the jump offset calculation in tailcall. The additional call to bpfintjitcompile skips the JIT context initialization. This effectively skips the offset calculation, resulting in outoffset = -1. Therefore, t...

Rocky Linux 9 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2023_1469)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231469 advisory. kernel: tun: avoid double free in tunfreenetdev CVE-2022-4744 ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF CVE-2023-0266 kernel: net: CP...

SUSE CVE-2026-97530

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature qla27xxcopymultiplepkt and qla27xxcopyfpinpkt poll rspq-ringptr-signature for RESPONSEPROCESSED 0xDEADDEAD to decide whether the next continuation IOCB has arrive...

CVE-2026-97481

A flaw was found in the Linux kernel's 8250 serial port driver. An attacker communicating over the serial interface can cause a Denial of Service DoS by flooding the port with messages during the system startup phase. Due to missing error handling for First-In, First-Out FIFO buffer interrupts, t...

CVE-2026-98056

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe driver, which can lead to a Denial of Service DoS. When scanning for storage namespaces, the driver iterates through gaps between namespace identifiers individually instead of processing only registered devices. A malicious o...

CVE-2026-98011

A flaw was found in the Linux kernel's Heavy-Hitter Filter HHF network scheduler. A local attacker with network administration privileges, which can be acquired within an unprivileged user namespace, can cause a Denial of Service DoS. By setting an excessively small quantum value alongside a...

CVE-2026-97530

A flaw was found in the Linux kernel's qla2xxx Fibre Channel driver. A remote entity on the Fibre Channel network can cause a Denial of Service DoS by transmitting frames containing specific payload data. The driver misinterprets matching data bytes within received frames as an indicator that...

CVE-2026-98013

A flaw was found in the Linux kernel. A local user with network administration privileges, including within a user namespace, can cause a Denial of Service DoS by configuring the Flow Queue Proportional Integral controller Enhanced FQ-PIE packet scheduler with an excessively low quantum value and...

CVE-2026-98123

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker can cause a Denial of Service DoS by sending a specially crafted network packet during an active SCTP connection. A discrepancy in how parameter padding is processed causes the syste...

SUSE CVE-2026-97481

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup There are rare cases in which the host gets stuck in the ISR because it is flooded with messages during the startup phase. The reason for the soft lockup in the ISR is the missing FIFO...