Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/brs: Fix kernel address leakage A user-only branch stack can contain branches originating from the kernel. As a result, kernel addresses are exposed to user space even when PERFSAMPLEBRANCHUSER is requested. On AMD...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iiobuff on the stack using aligned8, but no initializer is provided; however, there is a gap in the structure. This results in a data leak, a...

Astra Linux – vulnerability in jackson-databind

Jackson Databind versions prior to 2.13.0 allow a Java StackOverflow exception and denial of service caused by a large number of deeply nested objects...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Staging: rtl8723bs: Fixed a stack buffer overflow issue during the parsing of the OnAssocReq IE. The length of the Supported Rates IE from an incoming Association Request frame was directly used as the length for the memcpy...

Astra Linux – vulnerability in open-iscsi

An issue was discovered in Contiki through version 3.0. There is an out-of-bounds read vulnerability in the uIP TCP/IP stack component when calculating checksums for IP packets in upperlayerchksum within net/ipv4/uip.c...

Astra Linux - vulnerability in poppler, poppler-22

Poppler versions 24.06.1 through 25.x prior to 25.04.0 allow stack consumption and a SIGSEGV due to deeply nested structures within the metadata of a PDF document—for instance, a regular expression used to match a long pdfsubver string. This behavior occurs in Dict::lookup, Catalog::getMetadata,...

Astra Linux – vulnerability in xorg-server

A stack-based buffer overflow vulnerability was found in the X.Org X server and Xwayland. The X server contains multiple stack buffers with a size of XkbMaxShiftLevel XkbNumKbdGroups; however, CheckKeyTypes fails to validate or restrict non-canonical key types to XkbMaxShiftLevel. A client can th...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fix memory leak in array reallocation for stack state If an error NULL is returned by krealloc, callers of reallocarray were setting their allocation pointers to NULL; however, on error krealloc does not modify the...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group in the device. The group contains a list of ACLs. In turn, each ACL points to a...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix page reclaim for dead peer hairpin When adding a hairpin flow, a firmware-side send queue is created for the peer net device, which claims some host memory pages for its internal ring buffer. If the peer net device...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in initcard The loop creates a whitespace-stripped copy of the card shortname where len id is used for the bounds check. Since sizeofcard-id is 16 and the local id buffer is also 16 bytes...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix stack out-of-bounds read in ccparams debugfs getparam reads a congestion parameter as a u32 but formats it using the signed "%d" format into an 11-byte stack buffer. A value with bit 31 set, such as 0x80000000, is...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard stack limits against 32-bit overflow This patch ensures that arithmetic operations involving stack bounds are performed within the 64-bit domain, rather than the current 32-bit domain. The arithmetic involves adding a...

Astra Linux – vulnerability in gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. A stack buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

Astra Linux – Vulnerability in libwoodstox-java

Those who use Woodstox to parse XML data may be vulnerable to Denial of Service attacks DOS if DTD support is enabled. If the parser is running on user-supplied input, an attacker may provide content that causes the parser to crash due to a stack overflow. This vulnerability could potentially all...

Astra Linux – vulnerability in rsync

A flaw was found in rsync; it can be triggered when rsync compares file checksums. This flaw enables an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory, resulting in the gradual leakage of one byte of uninitialized stack data a...

SUSE CVE-2026-98413

In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avchaspermnoaudit avchaspermnoaudit is documented to return a copy of the access decision in @avd, but its early return for an empty requested permission set leaves the buffer untouched. All...

SUSE CVE-2026-101337

When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD...

SUSE CVE-2026-101339

A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field a HIP Rendezvous server can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is...

SUSE CVE-2026-101341

Tokens of text in RDATA of for example TXT records under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which ar...