Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: powerpc/spufs: The refcount leak in spufsinitisolatedloader has been fixed. The offindnodebypath function returns a nodepointer for a remote device, and the refcount is incremented. We should use ofnodeput on it after...

SUSE CVE-2026-68474

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it against vma-vmend instead of the local store size. On 64-bit, offset ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098853)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098853 advisory. In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to POWERPC spufs: Fix gang destroy leaks we used to hav...

Linux Distros Unpatched Vulnerability : CVE-2026-68474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it...

CVE-2026-68474

A flaw was found in the Linux kernel, specifically within the powerpc/spufs component responsible for managing memory access. This vulnerability allows for an out-of-bounds memory access due to incorrect boundary checks in the spufsmemmmapaccess function. An attacker could exploit this to corrupt...

CVE-2026-68474

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it against vma-vmend instead of the local store size. On 64-bit, offset ...

UBUNTU-CVE-2026-68474

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it against vma-vmend instead of the local store size. On 64-bit, offset ...

CVE-2026-68474

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it against vma-vmend instead of the local store size. On 64-bit, offset ...

CVE-2026-68474 powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it against vma-vmend instead of the local store size. On 64-bit, offset ...

CVE-2026-68474

The CVE-2026-68474 issue affects the Linux kernel’s powerpc/spufs subsystem, specifically spufs_mem_mmap_access(). The local store offset is computed as address - vma->vm_start but bounds-checks are performed against vma->vm_end, which on 64-bit leaves the length unbounded relative to the L...

PT-2026-72186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the spufs mem mmap access function. The function calculates the local store offset as address - vma-vm start but incorrectly validates this offset...

CVE-2026-68474: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it against vma-vmend instead of the local store size. On 64-bit, offset ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004858)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004858 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: Fix refcount leak in spufsinitisolatedloader offindnodebypath returns remote devic...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22072)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22072 advisory. - In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prio...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22071)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22071 advisory. - In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufscreatecontext...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22073)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22073 advisory. - In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufsnewfile failur...

ROS-20260121-73-0049

A vulnerability in the spufs component of the Linux operating system kernel is related to improper memory freeing before deleting the last reference. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993019)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993019 advisory. In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufsnewfile failure It's called from spufsfilldir, and caller of that will ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992769 advisory. In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufscreatecontext Leak fixes back in 2008 missed one case - if we are tryin...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993296)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993296 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: Fix refcount leak in spufsinitisolatedloader offindnodebypath returns remote devic...