Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: uprobes: fix kernel info leak via “uprobes” vma xoladdvma maps the uninitialized page allocated by createxolarea into userspace. On some architectures x86, this memory is readable even without VMREAD; VMEXEC results in the same...

EUVD-2025-22675

Malicious code in bioql PyPI...

SUSE-SU-2025:02851-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2023-52923: netfilter: nftables: split async and sync catchall in t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: uprobes: The shared zeropage was rejected in uprobewriteopcode. The following crashes were triggered in syzkaller tests: BUG: Incorrect page state in process syz.7.38, pfn:1eff3 Page: refcount:0, mapcount:0,...

CVE-2025-22046

CVE-2025-22046: In the Linux kernel, the uprobes/x86 uretprobe trampoline check was hardened to prevent a trampoline_check_ip path that could allow a call into the syscall from memory addresses near the bottom of the address space if uretprobes were not set up. Root cause: trampoline_check_ip cou...

Linux kernel uprobes DoS

The vulnerability of the uprobes component in the Linux operating system’s kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2025-21881 uprobes: Reject the shared zeropage in uprobe_write_opcode()

In the Linux kernel, the following vulnerability has been resolved: uprobes: Reject the shared zeropage in uprobewriteopcode We triggered the following crash in syzkaller tests: BUG: Bad page state in process syz.7.38 pfn:1eff3 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0...