Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams bounds before overflow The check for data-streams overflow is performed after a buffer overflow has already occurred. Move the overflow check to before writing to the buffer. By the way, issuing a...

Astra Linux – Vulnerability in libxml2

In libxml2 versions before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings due to an incorrect return value. This issue occurs in the xmlPythonFileRead and xmlPythonFileReadRaw functions, caused by a discrepancy between bytes and characters...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ipv6: Avoid overflows in ip6datagramsendctl Yiming Qian reported: I believe I have found a locally triggerable kernel bug in the IPv6 sendmsg auxiliary-data path that can cause the kernel to panic via skbunderpanic local DoS...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkimfinishbodyhash does not validate the relationship between sig-bodyhash.len and b-bh.len; thus, a crafted DKIM-Signature header might lead to the leakage of sensitive information from process memory...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: chaoskey: A use-after-free issue was fixed in the chaoskeyrelease function. The chaoskey driver contains a use-after-free bug in its release routine. If the user closes the device file after the USB device is unplugged, a...

Astra Linux – Vulnerability in Squid

A issue was discovered in Squid 4.x before 4.15, and in 5.x before 5.0.6. If a remote server sends a certain response header via HTTP or HTTPS, it can lead to a denial of service. This header can potentially appear in legitimate network traffic...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xprtrdma: Repost Receive buffers for malformed replies The rpcrdmawcreceive function decrements the transport’s Receive count for each incomplete reply before dispatching a successful Receive to rpcrdmareplyhandler. The handle...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 cap PDIO scan in getmultiple at ADM1266PDIONR The adm1266 gpiogetmultiple function iterates through the PDIO portion of the mask provided by the caller using the following code: foreachsetbitfromgpionr, mask,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: The issue of OOB access in ibmvfcdiscovertargetsdone has been fixed. A malicious or compromised VIO server can return a numwritten value in the discovertargets MAD response that exceeds maxtargets. This value is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPICA: fixed the ACPI operand cache leak in dswstate.c ACPICA commit: 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I discovered a ACPI cache leak in cases where ACPI early termination occurs and the boot process continues. When earl...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ext2: Reject inodes with zero inlink and valid mode in ext2iget ext2iget already rejects inodes with inlink == 0 when imode is zero or idtime is set, treating them as deleted. However, the case where inlink == 0 with a non-zer...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: iio: Magnetometer: rm3100 – added a boundary check for the value read from RM3100REGTMRC. Recently, we encountered a kernel crash in the function rm3100commonprobe, caused by out-of-bound access to the array rm3100samprates due t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before initialization Another syzkaller bug. KVM incorrectly allows the user space to pend vCPU events for a vCPU that has not yet been initialized. This leads to KVM interpreting a bunch...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: The capacity of the Dirty Page Table is validated during the logreplay copylcns operation. During the analysis phase of the $LogFile journal replay process, logreplay copies LCNs from each action log record into an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: i2c: imx: fixed the issue where the bus gets locked during block-read operations on SMBus with a count of 0 atomic operation. SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects this...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtlwifi: pci: fixed a possible use-after-free caused by unfinished irqpreparebcntasklet. The irqpreparebcntasklet is initialized in rtlpciinit and scheduled when the RTLIMRBCNINT interrupt is triggered by hardware. However,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix the detach procedure for virtual devices in genpd. If a device is attached to a PM domain using genpddevpmattachbyid, genpd calls pmruntimeenable for the corresponding virtual device that it registers. While...

Astra Linux – Vulnerability in openjpeg2

It was discovered that openjpeg v 2.5.0 contains a NULL pointer dereference through the /openjp2/dwt.c component...

Astra Linux – Vulnerability in Netty

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty was vulnerable to MadeYouReset DDoS attacks. This is a logical vulnerability in the HTTP/2 protocol, which exploits malformed HTTP/2 control frames to circumvent the maximu...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: Use expect-helper. Use expect-helper in ctnetlink and /proc to dump the helper’s name. Using nfcthelp without holding a reference to the master conntrack is unsafe. Use exp-master-helper in the...