Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...

CVE-2026-73261: Improper Input Validation

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MGENABLETCPIP in src/netbuiltin.c does not reject a TCP option whose declared opts1 length exceeds the remaining option bytes. In handleopt, a NOP followed by a truncated MSS option causes...

CVE-2026-106438

The MongoDB C Driver contains a vulnerability in its Decimal128 string parsing logic. An incorrect calculation during exactness checks allows the driver to accept certain over-precision inputs containing leading zeros rather than rejecting them. This results in the creation of a numeric value tha...

CVE-2026-106438 Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

CVE-2026-106438 Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

Linux Distros Unpatched Vulnerability : CVE-2026-90359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject 8 byte return values on return-reading trampoline paths btfdistillfuncproto builds the function model used for the fentry/fexit/fmodret/fsession...

CVE-2026-90359

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject 8 byte return values on return-reading trampoline paths btfdistillfuncproto builds the function model used for the fentry/fexit/fmodret/fsession trampolines and structops. It has accepted a 16-byte int128 return value...

CVE-2026-90359 bpf: Reject >8 byte return values on return-reading trampoline paths

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject 8 byte return values on return-reading trampoline paths btfdistillfuncproto builds the function model used for the fentry/fexit/fmodret/fsession trampolines and structops. It has accepted a 16-byte int128 return value...

CVE-2026-90359 bpf: Reject >8 byte return values on return-reading trampoline paths

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject 8 byte return values on return-reading trampoline paths btfdistillfuncproto builds the function model used for the fentry/fexit/fmodret/fsession trampolines and structops. It has accepted a 16-byte int128 return value...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.5. It arises because BPF trampolines retain only 8 bytes of return values, while btfdistillfuncproto expects a 16-byte int128 return value. For target return types such as fexit, fmodret, fsession, and its variants like multi, as well as...

EUVD-2020-17373

Malware in sbrugna...

UBUNTU-CVE-2021-46977

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Disable preemption when probing user return MSRs Disable preemption when probing a user return MSR via RDSMR/WRMSR. If the MSR holds a different value per logical CPU, the WRMSR could corrupt the host's value if KVM is...

PT-2021-29099

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.0 through 5.4.123 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-29124

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-29142

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.235 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-25148

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.235 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-29066

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.42 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-29157

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.271 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-25130

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue is related to the corruption of the value of pg bytes written in the nfs do recoalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations...