Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same blkcg are released concurrently, a use-after-free can occur. The race happens when one blkg's __blkcg_rstat_flush() removes another blkg's iostat entries via llist_del_all(). The second blkg sees an empty list and proceeds to free itself while the first is still iterating over its entries. Move the flush from __blkg_release() (RCU callback) to blkg_release() (before call_rcu). This ensures the RCU grace period waits for any concurrent flush's rcu_read_lock() section to complete before freeing.

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same blkcg are released concurrently, a use-after-free can occur. The race happens when one blkg's __blkcg_rstat_flush() removes another blkg's iostat entries via llist_del_all(). The second blkg sees an empty list and proceeds to free itself while the first is still iterating over its entries. Move the flush from __blkg_release() (RCU callback) to blkg_release() (before call_rcu). This ensures the RCU grace period waits for any concurrent flush's rcu_read_lock() section to complete before freeing.

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same blkcg are released concurrently, a use-after-free can occur. The race happens when one blkg's __blkcg_rstat_flush() removes another blkg's iostat entries via llist_del_all(). The second blkg sees an empty list and proceeds to free itself while the first is still iterating over its entries. Move the flush from __blkg_release() (RCU callback) to blkg_release() (before call_rcu). This ensures the RCU grace period waits for any concurrent flush's rcu_read_lock() section to complete before freeing.

blk-cgroup: fix UAF in __blkcg_rstat_flush()

In the Linux kernel, the following vulnerability has been resolved: b ...

Уязвимость kernel-lt

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same blkcg are released concurrently, a use-after-free can occur. The race happens when one blkg's __blkcg_rstat_flush() removes another blkg's iostat entries via llist_del_all(). The second blkg sees an empty list and proceeds to free itself while the first is still iterating over its entries. Move the flush from __blkg_release() (RCU callback) to blkg_release() (before call_rcu). This ensures the RCU grace period waits for any concurrent flush's rcu_read_lock() section to complete before freeing.

Important: kernel security update

ELSA-2026-67468-0: kernel security update (IMPORTANT)

ELSA-2026-71233: kernel security, bug fix, and enhancement update (IMPORTANT)

ELSA-2026-71232: kernel security, bug fix, and enhancement update (IMPORTANT)

Important: kernel security, bug fix, and enhancement update

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

ALT-PU-2026-12207: package `kernel-image-for-vm` update to version 6.18.38-alt1