Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: spufs: Fixing gang directory lifetimes Prior to “POWERPC spufs: Fix gang destroy leaks”, we had a problem with gang lifetimes. When a gang was created, it would return an opened gang directory, which is normally removed when t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: “spufs”: fixed a leak related to the failure of spufsnewfile. This issue is triggered from spufsfilldir, and the caller of that function will call spufsrmdir in case of failure. This action removes everything we’ve managed to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098853)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098853 advisory. In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to POWERPC spufs: Fix gang destroy leaks we used to hav...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: powerpc/spufs: The refcount leak in spufsinitisolatedloader has been fixed. The offindnodebypath function returns a nodepointer for a remote device, and the refcount is incremented. We should use ofnodeput on it after...

Astra Linux – Vulnerability in Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: “spufs”: fixed a leak in spufscreatecontext. The fix for the leak was implemented back in 2008; however, it overlooked one case—if we try to set affinity, and spufsmkdir fails, we need to remove the reference to the neighbor obje...

Linux Distros Unpatched Vulnerability : CVE-2026-68474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it...

CVE-2026-68474

A flaw was found in the Linux kernel, specifically within the powerpc/spufs component responsible for managing memory access. This vulnerability allows for an out-of-bounds memory access due to incorrect boundary checks in the spufsmemmmapaccess function. An attacker could exploit this to corrupt...

CVE-2026-68474

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it against vma-vmend instead of the local store size. On 64-bit, offset ...

CVE-2026-68474

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it against vma-vmend instead of the local store size. On 64-bit, offset ...

UBUNTU-CVE-2026-68474

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it against vma-vmend instead of the local store size. On 64-bit, offset ...

CVE-2026-68474

The CVE-2026-68474 issue affects the Linux kernel’s powerpc/spufs subsystem, specifically spufs_mem_mmap_access(). The local store offset is computed as address - vma->vm_start but bounds-checks are performed against vma->vm_end, which on 64-bit leaves the length unbounded relative to the L...

CVE-2026-68474 powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it against vma-vmend instead of the local store size. On 64-bit, offset ...

PT-2026-72186

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufs mem mmap access spufs mem mmap access computes the local store offset as address - vma-vm start, but bounds-checks it against vma-vm end instead of the local store size. On 64-bit,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004858)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004858 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: Fix refcount leak in spufsinitisolatedloader offindnodebypath returns remote devic...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22072)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22072 advisory. - In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prio...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22073)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22073 advisory. - In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufsnewfile failur...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22071)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22071 advisory. - In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufscreatecontext...

ROS-20260121-73-0049

A vulnerability in the spufs component of the Linux operating system kernel is related to improper memory freeing before deleting the last reference. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993296)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993296 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: Fix refcount leak in spufsinitisolatedloader offindnodebypath returns remote devic...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992769 advisory. In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufscreatecontext Leak fixes back in 2008 missed one case - if we are tryin...