Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tipc: Fixed the msg-req TLV len check in tipcnlcompatnametabledumpheader. This is a follow-up to commit 974cb0e3e7c9 “tipc: Fixed uninit-value in tipcnlcompatnametabledump“”, where a type cast from sizeof.. to int was required so...

CVE-2026-34553

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a defect in LUT dump/iteration logic affecting CIccCLUT::Iterate and output produced by CIccMBB::Describe via CLUT dumping. This issue has been patched in version 2.3.1....

EUVD-2026-17718

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a defect in LUT dump/iteration logic affecting CIccCLUT::Iterate and output produced by CIccMBB::Describe via CLUT dumping. This issue has been patched in version 2.3.1....

EUVD-2025-124928

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

CVE-2025-40155

Technical details for CVE-2025-40155 are not provided in the supplied documents. The connected sources reference CVE IDs but do not specify affected products, versions, impact, or fixes. Monitor official advisories for exact details and remediation.

CVE-2025-40155 iommu/vt-d: debugfs: Fix legacy mode page table dump logic

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

Linux Distros Unpatched Vulnerability : CVE-2025-40155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in th...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988902)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988902 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix the msg-req tlv len check in tipcnlcompatnametabledumpheader This is a follow-up for...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlinkdumptable: c if res ctgeneral; // HERE cb-args1 = unsigned longct; ... While it’s very unlikely, it’s possible that ct could be equ...

EUVD-2025-26748

Malicious code in bioql PyPI...

EUVD-2025-26788

Malicious code in bioql PyPI...

netfilter: ctnetlink: fix refcount leak on table dump

...

Linux Distros Unpatched Vulnerability : CVE-2025-38721

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlinkdumptable: if res ctgeneral %NASLMINLEVEL 80900 C Tenable, In...

UBUNTU-CVE-2025-38721

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlinkdumptable: if res ctgeneral; // HERE cb-args1 = unsigned longct; ... While its very unlikely, its possible that ct == last. If this...

CVE-2025-38721 netfilter: ctnetlink: fix refcount leak on table dump

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlinkdumptable: if res ctgeneral; // HERE cb-args1 = unsigned longct; ... While its very unlikely, its possible that ct == last. If this...

CVE-2025-38721

CVE-2025-38721 affects the Linux kernel netfilter ctnetlink table dump path. A reference count leak in ctnetlink_dump_table() can occur if res ct_general) only when ct != last, and a cookie-based workaround is mentioned as an alternative. The Astra Linux bulletin confirms the same vulnerability i...

UBUNTU-CVE-2022-49862

In the Linux kernel, the following vulnerability has been resolved: tipc: fix the msg-req tlv len check in tipcnlcompatnametabledumpheader This is a follow-up for commit 974cb0e3e7c9 "tipc: fix uninit-value in tipcnlcompatnametabledump" where it should have type casted sizeof.. to int to work whe...

CVE-2022-49862 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header

In the Linux kernel, the following vulnerability has been resolved: tipc: fix the msg-req tlv len check in tipcnlcompatnametabledumpheader This is a follow-up for commit 974cb0e3e7c9 "tipc: fix uninit-value in tipcnlcompatnametabledump" where it should have type casted sizeof.. to int to work whe...

SUSE CVE-2006-1518

Buffer overflow in the opentable function in sqlbase.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COMTABLEDUMP packets with invalid length values...

PT-2022-36560

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.300 Description A potential security issue exists due to an incorrect check of the msg-req TLV length in the tipc nl compat name table dump header function. The actual impact and attack plausibility have no...