CVE-2026-68183

A flaw was found in the stratix10-svc firmware component of the Linux kernel. This vulnerability involves memory leaks when memory allocation fails and list corruption due to incorrect memory management and an erroneous list deletion operation. These issues could lead to system instability or a...

UBUNTU-CVE-2026-68183

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix memory leaks and list corruption bugs Fix a memory leak when genpoolalloc fails by freeing pmem on the error path. Switch pmem allocation from devmkzalloc to kzalloc with explicit kfree in the free pa...

EUVD-2026-55284

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix memory leaks and list corruption bugs Fix a memory leak when genpoolalloc fails by freeing pmem on the error path. Switch pmem allocation from devmkzalloc to kzalloc with explicit kfree in the free pa...

CVE-2026-68183

CVE-2026-68183 concerns the Linux kernel firmware for stratix10-svc. The vulnerability arises from improper memory management causing a memory leak when gen_pool_alloc() fails and a list corruption on failed lookups. The fix changes pmem allocation from devm_kzalloc() to kzalloc() with explicit k...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Firmware: stratix10-svc – Fixed a bug in saving controller data. Fixed the incorrect use of platformsetdrvdata and devsetdrvdata. Both functions refer to the same data, and they override each other. This caused the svc driver’...

Linux Distros Unpatched Vulnerability : CVE-2026-68183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: stratix10-svc: fix memory leaks and list corruption bugs Fix a memory leak when genpoolalloc fails by freeing pmem on the error path. Switch pmem...

CVE-2026-53204

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL deref on rsusendmsg timeout in probe rsusendmsg can return -ETIMEDOUT when waitforcompletioninterruptibletimeout fires while the SMC call is still pending. In stratix10rsuprobe, the error paths f...

CVE-2026-53204

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL deref on rsusendmsg timeout in probe rsusendmsg can return -ETIMEDOUT when waitforcompletioninterruptibletimeout fires while the SMC call is still pending. In stratix10rsuprobe, the error paths f...

EUVD-2026-39295

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL deref on rsusendmsg timeout in probe rsusendmsg can return -ETIMEDOUT when waitforcompletioninterruptibletimeout fires while the SMC call is still pending. In stratix10rsuprobe, the error paths f...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: stratix10-svc – A potential resource leak has been fixed in svccreatememorypool. svccreatememorypool is only called from stratix10svcdrvprobe. Most of the resources within the probe are managed, but this memremap call i...

CVE-2026-43410

A flaw was found in the Linux kernel's stratix10-rsu firmware driver. When the Remote System Update RSU is not enabled in the First Stage Boot Loader FSBL, the driver attempts to access an already-freed channel. This can lead to a NULL pointer dereference, causing a kernel panic and resulting in ...

UBUNTU-CVE-2026-43410

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled When the Remote System Update RSU isn't enabled in the First Stage Boot Loader FSBL, the driver encounters a NULL pointer dereference when excute...

CVE-2026-43410

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled When the Remote System Update RSU isn't enabled in the First Stage Boot Loader FSBL, the driver encounters a NULL pointer dereference when excute...

CVE-2026-43410 firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled When the Remote System Update RSU isn't enabled in the First Stage Boot Loader FSBL, the driver encounters a NULL pointer dereference when excute...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011319 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: Fix a potential resource leak in svccreatememorypool svccreatememorypool...

USN-8116-1: Linux kernel (Intel IoTG Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - ATM...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005598)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005598 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: Fix a potential resource leak in svccreatememorypool svccreatememorypool...

firmware: stratix10-svc: fix bug in saving controller data

...

SUSE CVE-2025-68328

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix bug in saving controller data Fix the incorrect usage of platformsetdrvdata and devsetdrvdata. They both are of the same data and overrides each other. This resulted in the rmmod of the svc driver to...

CVE-2025-68328

CVE-2025-68328 relates to the Linux kernel Stratix10 SVC firmware: a bug in saving controller data caused by incorrect use of platform_set_drvdata and dev_set_drvdata, which can result in rmmod failing and a kernel panic during kthread_stop and fifo free. The issue has been addressed in the SUSE/...