Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: A forced lockup of the work queue has been added to delay processing when using radeon. Although the radeon card performs fence operations and waits for the GPU to complete processing the current batch of rings, there...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Synchronize heartbeat callbacks with o2net teardown This patch addresses two issues related to OCFS2 heartbeat/runs during o2net teardown. This patch fixes the issue where heartbeat callbacks remain registered even when...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: iforce processes the force-feedback effect index directly from the device. The iforceprocesspacket function handles a status report packet ID 0x02 by taking the force-feedback effect index directly from the device and usin...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: mana: Added NULL guards in the teardown process to prevent panics during attach failures. When queue allocation fails halfway through, error cleanup releases variables apc-txqp and apc-rxqs containing NULL values. Multipl...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fixed the issue of a leak in the accept queue count when there is a mismatch in transports. The virtiotransportrecvlisten function calls skacceptqadded before vsockassigntransport. If vsockassigntransport fails or a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Prevent use-after-free when the client exits before the supplicant The commit 70b0d6b0a199 “tee: optee: Fix supplicant wait loop” made the client wait until it can be interrupted during shutdown or after a supplicant...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xfrm: The route for MIGRATE notifications to the caller’s netns was corrected. The xfrmsendmigrate function in net/xfrm/xfrmuser.c and pfkeysendmigrate in net/key/afkey.c both hardcode initnet for the multicast message that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: The vividupdateformatcap/out functions must only be called if the capture/output queue is not busy. However, these functions are not checked for in controls that select the CROP/COMPOSE/SCALE capability. Only when streaming start...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: power: supply: ucs1002: fix use-after-free on remove ucs1002 does not have a remove callback; therefore, the unbinding process entirely occurs through devm. The alert IRQ handler queues the healthpoll delayed work, and this work...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvmet: Avoid recursive nvmet-wq flushing in nvmetctrlfree. The nvmettcpreleasequeuework function runs on nvmet-wq and can remove the final controller reference through nvmetcqput. If this triggers nvmetctrlfree, the tear-down...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: IB/isert: The full-feature receive buffers are posted after session registration. isertputlogintx posts the full-feature receive buffers before transportregistersession is executed. As a result, an initiator that does not wait fo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: UBTMC: Check URB actuallength for interrupt-IN notifications. USB UBTMC devices can use an optional interrupt endpoint for notification messages. These messages typically contain two-byte headers that indicate the payload...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: releasing free IRQ resources and draining funcwakenotify before teardown. The Broadcom BDC UDC driver registers its IRQ handler using devmrequestirq in bdcudcinit. Therefore, the IRQ is released by devm onl...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fixed an issue where the listener socket was not properly freed after use, in isoconnready. The isoconnready function retrieves the BIS listener socket using isogetsock, which takes a reference to the socket...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans The sndusbmidigetmsinfo function validates the size of the internal MIDIStreaming endpoint descriptor before using the baAssocJackID array. However, the descriptor walker may...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - media: cx23885: Cancel the NetUP CI work before termination. - netupciexit frees the netupcistate when its work item is freed. However, netupreadcistatus may still be pending or running on the system’s workqueue. The worker...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Reading virtqueues under worker locks The commit bd50c5dc182b “vsock/virtio: adding support for device suspend/resume” changed the transition of the run flags from false to true when restoring replacement virtqueues...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: cfg80211: Cancel sched scan results work on unregister The cfg80211schedscanresults function can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid double-rtnllock ELP metric worker The batadvvelpgetthroughput function might be called when the RTNL lock is already held. This could be problematic when the work queue item is cancelled using...

Astra Linux – Vulnerability in SQLite3

The flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN where the right-hand side is a view. This can lead to a NULL pointer dereference or incorrect results...