Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: dmaengine: fsl-qdma: A memory leak related to the queue command’s DMA operations has been fixed. The dmaalloccoherent function is not canceled either in the remove function, nor in the error handling path of fslqdmaprobe. Swit...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xdp: generate a warning when the calculated tailroom is negative. Many Ethernet drivers report that the xdp Rx queue frag size is the same as the DMA write size. However, the only user of this field, namely bpfxdpfragsincreasetai...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Reading virtqueues under worker locks The commit bd50c5dc182b “vsock/virtio: adding support for device suspend/resume” changed the transition of the run flags from false to true when restoring replacement virtqueues...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ice: xsk: disable txq irq before flushing hw iceqpdis intends to stop a given queue pair that is a target of xsk pool attach/detach. One of the steps is to disable interrupts on these queues. It currently is broken in a way that...

Astra Linux – Vulnerability in Corosync

A flaw was discovered in Corosync. There is an integer overflow vulnerability in Corosync’s join message sanity validation mechanism, which allows a remote, unauthenticated attacker to send crafted User Datagram Protocol UDP packets. This can cause the service to crash, resulting in a denial of...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: The flushing of tasks operates in a dependency order. virtiovsockremove stops the virtqueue and then flushes each task before freeing the enclosing virtiovsock. The current order does not take into account the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: cfg80211: Cancel sched scan results work on unregister The cfg80211schedscanresults function can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: uacce: Ensure safe queue release with state management. Directly calling putqueue carries risks, as it cannot guarantee that the resources of uaccequeue have been fully released beforehand. Therefore, adding a stopqueue...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tls: Purged asynchold from tlsdecryptasyncwait The asynchold queue retains encrypted input data while the AEAD engine references their scatterlist data. Once tlsdecryptwait returns, all AEAD operations are completed, and the engi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fixed the issue where the accept queue count leak occurred due to transport mismatch. The virtiotransportrecvlisten function calls skacceptqadded before vsockassigntransport. If vsockassigntransport fails or a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fixed an issue where the listener socket was not properly freed after use, in the isoconnready function. The isoconnready function retrieves the BIS listener socket using isogetsock, which takes a reference to the...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: Destroy queues before realnumtxqueues is zeroed xennetDestroyQueues relies on info-netdev-realnumtxqueues to delete queues. Since d7dac083414eb5bb99a6d2ed53dc2c1b405224e5 “net-sysfs: Update the queue counts in the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The vividupdateformatcap/out functions must only be called if the capture/output queue is not busy. However, these functions are not checked for in controls that select the CROP/COMPOSE/SCALE capability. Only when streaming start...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvmet: Avoid recursive nvmet-wq flushing in nvmetctrlfree. The nvmettcpreleasequeuework function runs on nvmet-wq and can remove the final controller reference through nvmetcqput. If this triggers nvmetctrlfree, the tear-down...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: UBTMC: Check URB actuallength for interrupt-IN notifications. USB UBTMC devices can use an optional interrupt endpoint for notification messages. These messages typically contain two-byte headers that indicate the payload...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the cdnspgadgetinit and cdnspgadgetexit functions, the gadget structure pdev-gadget was freed before its endpoints. The endpoints are...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nbd: The issue of task hanging when the signal interrupt nbdstartdeviceioctl occurs has been fixed. The following program is a simplified version of the reproducer function: c int mainvoid int sv2, fd; if socketpairAFUNIX,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: checks the data direction of a C2HData PDU The nvmetcphandlec2hdata function finds the request by command id and checks that it has a payload. However, it does not check that the command actually requested data to be...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput function selects a count of 2 whenever the transfer speed is slower than high-speed. It never checks whether this count corresponds to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: IB/isert: The full-feature receive buffers are posted after session registration. isertputlogintx posts the full-feature receive buffers before transportregistersession is executed. As a result, an initiator that does not wait...