PT-2026-106546

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A use-after-free issue exists in the IB/mlx4 component. The register pkey tree function ignores errors returned by register one pkey tree and proceeds to register remaining slaves. Because...

PT-2026-106526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon component specifically affecting the w83791d driver. When fan/pwm 4-5 pins are not used as GPIO, the w83791d probe function creates the w83791d group fanpwm4...

ROS-20261006-73-0255

The vulnerability of the damonsysfsschemeadddirs function in the mm/damon/sysfs-schemes.c module, a memory management subsystem of the Linux operating system, is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Remove the redundant VPD flash read in the sysfs read path. The function qla2x00sysfsreadvpd calls ha-ispops-readoptrom a second time after releasing the optrommutex. This repeated read is redundant. Unlike the fir...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: blktrace: Fixed a UAF in the blkTraceAccess function after removal by sysfs. There is a use-after-free issue triggered by the following process: bash P1sda P2sdb echo 0 /sys/block/sdb/trace/enable blkTraceRemoveQueue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fixed a use-after-free in enablesensor. The function enablesensorstore may call setpowerreportstate, which dereferes sensorinst-powerstate and sensorinst-reportstate. These pointers refer to entries in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Platform/x86: classmate-laptop – Added NULL pointer checks where necessary. In several places within the Classmate laptop driver, code that uses the accel object may execute before its address is stored in the driver’s data...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/core: Ensure that “ibport” is valid when accessing the sysfs node. The “ibport” structure must be set before adding the sysfs kobject, and reset after removing it. Otherwise, the system may crash when accessing the sysfs...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: iio: gyro: bmg160: A buffer overflow occurs when the bandwidth/filter parameter is not present in the table. The function bmg160getfilter checks the bmg160sampfreqtable array for an entry whose bwbits value matches the value...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sunrpc: fixed potential memory leaks in rpcsysfsxprtstatechange. This issue occurs during certain error-handling paths. When the function fails to obtain the object xprt, it simply returns 0, forgetting to decrease the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sysfs: Do not remove an existing directory during update failures When the sysfsupdategroup function is called for a named group, and the createfiles function fails e.g., due to -ENOMEM, the internalcreategroup function calls...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: Fixed a use-after-free in updatesuperwork when racing with unmount. The commit b98535d09179 “ext4: fix bugon in startthishandle during umount filesystem” moved ext4unregistersysfs before flushing ssbupdwork to prevent new...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: armffa: Fixed FFA device names for logical partitions. Each physical partition can provide multiple services, each with a unique UUID. Each such service can be represented as a logical partition with a unique combinatio...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: NFS: Fixed potential buffer overflows in nfssysfslinkrpcclient. The name field is a char64 type, and the size of clnt-clprogram-name remains unknown. Invoking strcat directly will also lead to potential buffer overflows...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: spi: Fix for statistics allocation. The controller per-cpu statistics is not allocated until after the controller has been registered with the driver core. This creates a window during which accessing the sysfs attributes may lea...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: A buffer overflow has been fixed in the liootargetnaclinfoshow function. The function liootargetnaclinfoshow uses sprintf within a loop to print details for each iSCSI connection in a session, without checkin...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: iio: trigger: sysfs: fix use-after-free on remove Ensure that the irqwork has completed before the trigger is freed. ================================================================== BUG: KASAN: use-after-free in irqworkrunli...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: safesetid: Check the size of policy writes. syzbot attempts to write a buffer with a large size to a sysfs entry. The writing is handled by handlepolicyupdate, which triggers a warning in kmalloc. Check the size specified for the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access. procbuspciread determines how much of the config space is readable based on capableCAPSYSADMIN. This check verifies the credentials of the task that calls read,...

SUSE CVE-2026-97538

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...