Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in netemenqueue uses q-tlen, which only counts packets in the internal tfifo. Packets placed in sch-q through the reordering path...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Animation in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vxlan: Do not reuse the cached iphdr value after skbtunnelcheckpmtu. skbtunnelcheckpmtu may change skb-head. Reusing the old iph after skbtunnelcheckpmtu can lead to a Use-After-Free error. Instead, use iphdrskb, as done in...

Astra Linux – Vulnerability in libpgjava

pgjdbc is the official PostgreSQL JDBC Driver. A security flaw was discovered in the JDBC driver for the postgresql database during security research. Systems that use the postgresql library will be vulnerable when an attacker controls the JDBC URL or connection properties. pgjdbc creates plugin...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validates the length of CCA AES cipher key requests The ccacipher2protkey function derives the copy length for the CPRB parameter directly from the length field in the key token. If the token length exceeds the...

Astra Linux – Vulnerability in Linux

A memory leak vulnerability was discovered in the Linux kernel’s llcpsockconnect function...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: A bug was fixed regarding a skb leak during the flow key update process. The ovsctexecute function always steals or frees the skb upon failure, whereas ovsflowkeyupdate does not do this. Therefore, if the functi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: afs: Fixed the callback service message parsers to pass through -EAGAIN. The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bpf, sockmap: Fixed the deadlock caused by afunix iter The bpfiterunixseqshow function may cause a deadlock when locksockfast uses the fast path, and the iter function attempts to update the sockmap. This results in a deadlock...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: A buffer overflow issue was addressed using a keyed discard mechanism. Since commit 68c5c42567bc “dm-integrity: replacing the forgeable discard filler with a keyed sector marker”, integritymetadata calculates a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found In mtkpciesetupirq, the IRQ domains are allocated before the controller’s IRQ is retrieved. If this step fails, the function directly returns an error, without...

Astra Linux – Vulnerability in Composer

Composer is a dependency manager for PHP. On the 2.x branch, before versions 2.2.24 and 2.7.7, the composer install command executed within a Git/HG repository with specially crafted branch names could lead to command injection. This required cloning untrusted repositories. Patches are available ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminating the RX channel during the TX prepare failure path When dmaengineprepslavesg fails for the TX channel, the error path terminates the TX DMA channel but leaves the RX channel running. Since the RX channe...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fixed an issue where iSCSI ISIDs were used after a “use-after-free” occurred in the REGISTER AND MOVE function. The corescsi3emulateproregisterandmove function maps the PERSISTENT RESERVE OUT parameter list...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xsk: The UMEM headroom validation has been improved to account for tailroom and minimum frame size. The current headroom validation in xdpumemreg might result in insufficient space being reserved for receiving Ethernet frames of...

Astra Linux – Vulnerability in Apache2

A properly crafted URI sent to httpd, configured as a forward proxy with ProxyRequests enabled, can cause a crash NULL pointer dereference. In configurations that mix forward and reverse proxy declarations, it can also allow requests to be directed to a declared Unix Domain Socket endpoint...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: ipvti: It is required that the CAPNETADMIN capability is present in the device netns for the changelink operation. The vtichangelink function operates on at most two netns: devnetdev and the tunnel link netns t-net. These tw...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: wifi: iwlwifi: mvm: fix an issue where the TXF key sanitizer might have an off-by-one error. iwlmvmfrobtxfkeyiter tracks the last matched byte position in the loop variable ‘i’. When a full key match is found match == keylen,...

Astra Linux – Vulnerability in golang-golang-x-net

In net/http in Go, before versions 1.18.6 and 1.19.x, and before version 1.19.1, attackers can cause a denial of service because an HTTP/2 connection may become unresponsive during closure, if the shutdown process is interrupted by a fatal error...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Audit: Fixed data races in skbqueuelen calls on auditqueue. Multiple readers access the auditqueue.qlen field via skbqueuelen, without holding the queue lock or using READONCE. Meanwhile, kauditd writes to this field via the...