Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: dm: prevent leakage of the caller’s thread keyring via the table device file The refactoring in commit a28d893eb327 “md: port block device access to file” inadvertently keeps the caller’s thread keyring alive for an extended peri...

SUSE CVE-2026-72103

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

Linux Distros Unpatched Vulnerability : CVE-2026-72103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in...

CVE-2026-72103

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

EUVD-2026-59061

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

PT-2026-72292

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.9 and later Description A refactoring in the device-mapper dm component causes the caller's thread keyring to persist beyond the caller's lifetime. This occurs when cryptsetup luksOpen uses a thread keyring to pass a...

CVE-2026-32606

IncusOS is an immutable OS image dedicated to running Incus. Prior to 202603142010, the default configuration of systemd-cryptenroll as used by IncusOS through mkosi allows for an attacker with physical access to the machine to access the encrypted data without requiring any interaction by the...

UBUNTU-CVE-2022-49822

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix connections leak when tlink setup failed If the tlink setup failed, lost to put the connections, then the module refcnt leak since the cifsd kthread not exit. Also leak the fscache info, and for next mount with fsc, it...

cryptsetup:crypt2_load_ondisk_fuzz: Use-of-uninitialized-value in crypt_free_volume_key

Project: https://gitlab.com/cryptsetup/cryptsetup.git Detailed Report: https://oss-fuzz.com/testcase?key=6540626414075904 Project: cryptsetup Fuzzing Engine: libFuzzer Fuzz Target: crypt2loadondiskfuzz Job Type: libfuzzermsancryptsetup Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...