Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipc: fixed to protect IPCS lookups using RCU. syzbot reported that it discovered a use-after-free vulnerability. 0 0: https://lore.kernel.org/all/[email protected]/ idrforeach is protected by rwsem, but...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Added a NULL pointer check for kzalloc Why & How Check the return pointer of kzalloc before using it...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: mediatek: mt8173-rt5650: Fixed a refcount leak in mt8173rt5650devprobe. ofparsephandle returns a node pointer with a refcount incremented; we should use ofnodeput on it when it is no longer needed. Fixed refcount leaks i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: llc: Fixed the SAP refcount leak in llcuiautobind. llcuiautobind creates an SAP after selecting a dynamic LSAP. llcsapopen returns a reference owned by the caller, and llcsapaddsocket takes a second reference for the socket’s...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: omap – Correctly allocate OMAPCRYPTOFORCECOPY scatterlists The current allocation of scatterlists in oprcryptocopysglists was incorrect; it was allocating an array of scatterlist pointers, rather than scatterlist objects...

Astra Linux – Vulnerability in Linux 5.10, Linux

The mm/mremap.c file in the Linux kernel before version 5.13.3 contains a use-after-free issue due to a stale Translation Look-And-Reduce TLB table, as the rmap lock is not held during a PUD move...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: wlcore – Ensure skbheadroom before calling skbpush. This fix prevents occasional skbunderpanic errors in wl1271txwork. In this case, the allocated headroom is less than necessary typically 110 – 94 = 16 bytes...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: net: bridge: Fixed an issue where the dstclone function was used, but the result was set incorrectly. This issue could cause problems because the entry might have a reference count of 0 or be already deleted. It also triggered th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: media: saa7134: Fixed a possible memory leak in saa7134videoinit1. In saa7134videoinit1, the return value of the first call to saa7134pgtablealloc is not checked. If this function fails, the function continues as if it was...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: prevent use-after-free when deleting claims When the batadvbladelbackboneclaims function deletes all claims for a backbone, it does this by removing the link entry from the hash list. This list entry was one of t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fixed the issue where a call to hnsroceqpremove was not locked. Sashiko points out that hnsroceqpremove requires the caller to hold certain locks. The error handling in hnsrocecreateqpcommon does not handle these locks...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtlwifi: pci: fixed a possible use-after-free caused by unfinished irqpreparebcntasklet. The irqpreparebcntasklet is initialized in rtlpciinit and scheduled when the RTLIMRBCNINT interrupt is triggered by hardware. However,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nfttunnel: fix use-after-free on object destroy The nfttunnelobjdestroy function calls metadatadstfree, which directly kfrees the metadatadst, ignoring the refcount of dstentry. Packets that relied on the dsthold...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: schsfb: Replace the direct dequeue call with peek and qdiscdequeuepeeked. When sfb has children e.g., qfq qdisc whose peek callback is qdiscpeekdequeued, we could encounter a kernel panic. When the parent of such qdisc...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fixed a possible use-after-free issue when removing a bridge port. When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disabling the per-port multicast context on each port a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rxrpc: The removal of calls from the rxnet-calls list was corrected to use listdelrcu instead of listdelinit, to prevent potential infinite loops due to improper handling of the proc.net/rxrpc/calls structure. However, this means...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: SUNRPC: hardened gsskrb5unwrapv2 against short tokens. The gsskrb5unwrapv2 function reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is at least GSSKRB5TOKHDRLEN 16 bytes long. Its helper...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Staging: rtl8723bs: Fixed issues with OOB reads in IE loops in issueassocreq and joincmdhdl. Two IE parsing loops fail to check the header bounds before dereferencing pIE-length: - In issueassocreq, the pmlmeinfo-network.ies i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ipv6: Added NULL checks for idev in SRv6 paths. in6devget may return NULL when the device has no IPv6 configuration e.g., when MTU IPV6MINMTU, or after NETDEVUNREGISTER. Added NULL checks for idev returned by in6devget in both...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: In the net: qlogic: qlcnic module, a NULL pointer dereference occurred in qlcnic83xxaddrings. In qlcnic83xxaddrings, the indirect function ahw-hwops-allocmbxargs is called to allocate memory for cmd.req.arg. A dereference of this...