Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qedf: Make qedfexecutetmf non-preemptible Stop calling smpprocessorid from preemptible code in qedfexecutetmf90. This results in BUGON when running an RT kernel. 659.343280 BUG: using smpprocessorid in preemptible 000000...

CVE-2026-73795

A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service...

CVE-2026-73795 HPE NonStop TMF Auditread2 - Denial of Service vulnerability

A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service...

CVE-2026-73795 HPE NonStop TMF Auditread2 - Denial of Service vulnerability

A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service...

CVE-2026-73795

A security vulnerability exists in HPE NonStop TMF Auditread2 (version T2781L02^ANZ and earlier) that can lead to a Denial of Service (DoS), memory corruption, buffer overflow, or stack overflow. Exploitation details are not provided in the documents. HPE has released fixes, and users should upda...

EUVD-2026-100959

A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service...

CVE-2026-73795: Stack-based Buffer Overflow

A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service...

PT-2026-114272

A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service...

HPE NonStop TMF Auditread2 buffer error vulnerability

The HPE NonStop TMF Auditread2 T2781L02^ANZ and earlier versions contain a buffer error vulnerability caused by a stack buffer overflow, which may lead to a denial of service...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100101 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmrlist handling An abort that is responded to by iSCSI itself is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021573 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Make qedfexecutetmf non-preemptible Stop calling smpprocessorid from preemptible code...

CVE-2025-68371

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed after device removal Correct possible race conditions during device removal. Previously, a scheduled work item to reset a LUN could still execute after the device was removed, leading...

openthread:ip6-fuzzer: Stack-buffer-overflow in ot::Tlv::GetSize

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=4688966503956480 Project: openthread Fuzzing Engine: honggfuzz Fuzz Target: ip6-fuzzer Job Type: honggfuzzasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989551 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Make qedfexecutetmf non-preemptible Stop calling smpprocessorid from preemptible code...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986663 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix conn use after free during resets If we haven't done a unbind target call we can...

Linux Distros Unpatched Vulnerability : CVE-2022-48791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: pm8001: Fix use-after-free for aborted TMF sastask Currently a use-after-free may occur if a TMF sastask is aborted before we handle the IO completion in...

SUSE-SU-2025:1092-1 Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122228 fixes one issue. The following security issue was fixed: - CVE-2022-48791: Fix use-after-free for aborted TMF sastask bsc1228002...

Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122228 fixes one issue. The following security issue was fixed: CVE-2022-48791: Fix use-after-free for aborted TMF sastask bsc1228002 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

kernel: scsi: qedf: Make qedf_execute_tmf() non-preemptible

A vulnerability was found in the Linux kernel's qedf driver function qedfexecutetmf, where the function call smpprocessorid is done from preemptible code before acquiring a lock which can result in BUGON when running an RT kernel. This can result in system inconsistencies...

AZL-51165 CVE-2024-49863 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: vhost/scsi: null-ptr-dereference in vhostscsigetreq Since commit 3f8ca2e115e5 "vhost/scsi: Extract common handling code from control queue handler" a null pointer dereference bug can be triggered when guest sends an SCSI AN...