Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit ADFSTATUSPFRUNNING is only used and checked by adfvf2pfshutdown before calling adfiovputmsg-mutexlockvf2pflock; however, the vf2pflock is initialized in adfdevinit,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: fixed the issue where VF bring-up affected the promiscuous state of PF. The Mbox handling of nixsetrxmode for a VF with promiscuous and allmulti flags set to false causes the deletion of the PF’s promiscuous and...

Astra Linux – Vulnerability in ffmpeg

An integer overflow vulnerability exists in the function filterprewitt in libavfilter/vfconvolution.c in Ffmpeg 4.2.1. Attackers can exploit this vulnerability to cause a Denial of Service or other unspecified impacts...

Astra Linux – Vulnerability in ffmpeg

An integer overflow vulnerability exists in the function filtersobel in libavfilter/vfconvolution.c in Ffmpeg 4.2.1. Attackers can exploit this vulnerability to cause a Denial of Service or other unspecified impacts...

Astra Linux – vulnerability in ffmpeg

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filterintra at libavfilter/vfbwdif.c, which may lead to memory corruption and other potential consequences...

Astra Linux – vulnerability in ffmpeg

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in deflate16 within libavfilter/vfneighbor.c; this may result in memory corruption and other potential consequences...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Ice: Fixed the resource leak in the FDIR CTRL VSI resource management during iceresetallvfs. Resetting all VFs causes a resource leak when FDIR filters are enabled. CTRL VSIs are only invalidated rather than freed. The issue was...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: cn10k – Restricted VF LMTLINE sharing to its own PF. rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read the physical base address of another function’s LMTLINE and...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Correct nested IFLAVFVLANLIST attribute validation Each attribute within a nested IFLAVFVLANLIST is assumed to be a struct iflavfvlaninfo; therefore, the size of such attributes must be at least sizeofstruct...

CVE-2026-90084

A flaw was found in the Linux kernel's octeontx2-vf driver. A race condition exists during the network device's probe and removal process, which can cause the system to attempt to queue work on an uninitialized workqueue. This issue can result in a system crash, leading to a denial of service...

Security Bulletin: NVIDIA Networking BlueField, ConnectX - September 2026

NVIDIA has released a software update for NVIDIA® Networking BlueField, ConnectX. To protect your system, download and install the latest NVIDIA firmware from the links provided in this bulletin. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities...

SUSE CVE-2026-97424

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

AZL-103700 CVE-2026-97424 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

CVE-2026-97424

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

UBUNTU-CVE-2026-97424

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

CVE-2026-97424 drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini, so the put site has to query amdgpuirqenabled because the get is skipped on SR-I...

SUSE CVE-2026-90084

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before registernetdev so ndosetrxmode does not queue work on a NULL workqueue. Unregister the netdev before destroying the workqueue, and add...

Linux Distros Unpatched Vulnerability : CVE-2026-90084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before registernetdev so ndosetrxmode does not queue work on a NULL...

DEBIAN-CVE-2026-90084

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before registernetdev so ndosetrxmode does not queue work on a NULL workqueue. Unregister the netdev before destroying the workqueue, and add...

AZL-102960 CVE-2026-90084 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before registernetdev so ndosetrxmode does not queue work on a NULL workqueue. Unregister the netdev before destroying the workqueue, and add...