Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fixed the zerocopy completion for multi-skbs sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned use...

DEBIAN-CVE-2026-97988

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

AZL-104721 CVE-2026-97988 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

CVE-2026-97988

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

UBUNTU-CVE-2026-97988

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

EUVD-2026-86642

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

CVE-2026-97988 vhost: invalidate vring access on IOTLB transitions

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

CVE-2026-97988 vhost: invalidate vring access on IOTLB transitions

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

CVE-2026-97988

The Linux kernel contains a vulnerability in vhost-net and vhost-vsock related to vring access during IOTLB transitions . When VIRTIO_F_ACCESS_PLATFORM changes, cached vring pointers and IOTLB metadata may be interpreted in the wrong address space, potentially leaving stale ring mappings in use. ...

CVE-2026-97988

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

CVE-2026-97988: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

Linux Distros Unpatched Vulnerability : CVE-2026-97988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different...

PT-2026-98652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost component where cached vring pointers and IOTLB metadata are not properly invalidated when VIRTIO F ACCESS PLATFORM changes. This can lead to stale ring...

SUSE CVE-2026-90138

In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's skerr in vsockaccept Syzbot reported an issue which can be reproduced with these steps: r0 = socketAFVSOCK, SOCKSTREAM, 0 bindr0, VMADDRCIDANY, PORT connectr0, VMADDRCIDLOCAL, PORT - -1, EPROTO...

Linux Distros Unpatched Vulnerability : CVE-2026-90138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock: don't check the listener's skerr in vsockaccept Syzbot reported an issue which can be reproduced with these steps: r0 = socketAFVSOCK, SOCKSTREAM, 0...

CVE-2026-90138 vsock: don't check the listener's sk_err in vsock_accept()

In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's skerr in vsockaccept Syzbot reported an issue which can be reproduced with these steps: r0 = socketAFVSOCK, SOCKSTREAM, 0 bindr0, VMADDRCIDANY, PORT connectr0, VMADDRCIDLOCAL, PORT - -1, EPROTO...

CVE-2026-90138 vsock: don't check the listener's sk_err in vsock_accept()

In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's skerr in vsockaccept Syzbot reported an issue which can be reproduced with these steps: r0 = socketAFVSOCK, SOCKSTREAM, 0 bindr0, VMADDRCIDANY, PORT connectr0, VMADDRCIDLOCAL, PORT - -1, EPROTO...

CVE-2026-90138: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's skerr in vsockaccept Syzbot reported an issue which can be reproduced with these steps: r0 = socketAFVSOCK, SOCKSTREAM, 0 bindr0, VMADDRCIDANY, PORT connectr0, VMADDRCIDLOCAL, PORT - -1, EPROTO...

PT-2026-94486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vsock implementation where the vsock accept function incorrectly checks the sk err variable of the listener socket. If a socket triggers a failed self-connect...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fixed the potential underflow in virtiotransportgetcredit. The credit calculation in virtiotransportgetcredit uses unsigned arithmetic: ret = vvs-peerbufalloc - vvs-txcnt - vvs-peerfwdcnt; If the peer reduces its...