Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: vxlan: Use pskbnetworkmaypull for pulling network layer headers during the transmit path. In vxlanxmit, arpreduce, and vxlanmdbentryskbget, pskbmaypull was being used to verify the availability of network layer headers ARP,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: hsi: omapssicore: fixed the issue where the DMA mask setup for the SSI controller device was missing. The OMAP SSI driver uses a synthetic HSI controller device, which is allocated via hsialloccontroller. This device does not go...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: media: cx231xx: Reject geometry changes while the VBI queue is busy. The functions vidiocsfmtvidcap and vidiocsstd change the device-wide dev-width / dev-norm, but only refuse the change when the video queue dev-vidq is busy...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fixed the OOB altmode array index issue. The UCSI displayport driver indexes the port’s altmode array using the GETCURRENTCAM response. This indexing occurs after checking that the value of...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390 – Fixed a memory leak in guest debug handling. The bpdata is only freed in the error case by using kfreebpdata. Every successful call to KVMSETGUESTDEBUG will cause the bpdata to be leaked...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l34: draining threaded IRQ before runtime suspension The cs35l34runtimesuspend function currently switches the codec to regcachecacheonlytrue, asserts resetlow, and turns off the device without first quiescing the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Sound: ua101 – fixed division by zero at the probe. A missing sanity check has been added for bNrChannels in detectusbformat. This prevents a division by zero in playbackurbcomplete and captureurbcomplete. The USB core does not...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rds: ib: rejecting FRMR registrations before an IB connection is established The rdsibgetmr function extracts the rdsibconnection from conn-ctransportdata and passes it to rdsibregfrmr for FRWR memory registration. In a newly...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Synchronize heartbeat callbacks with o2net teardown This patch addresses two issues related to OCFS2 heartbeat/runs during o2net teardown. This patch fixes the issue where heartbeat callbacks remain registered even when...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: geneve: It is required that CAPNETADMIN is set in the device’s netns for the changelink function. A tunnel changelink operates on at most two netns: devnetdev and the sticky underlay netns geneve-net. These differences arise...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: SUNRPC: hardened gsskrb5unwrapv2 against short tokens. The gsskrb5unwrapv2 function reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is at least GSSKRB5TOKHDRLEN 16 bytes long. Its helper...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915 – The reference to hif2 is only released in error cases where dev-hif2 is set, and this value is not assigned until after the IRQ setup is completed. If pciallocirqvectors or the primary devmrequestirq fails, t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: A zero mailbox struct was introduced in the qla2x00getfirmwarestate function. The mbxcmdt structure is allocated on the stack but remains uninitialized. The qla2x00mailboxcommand function has several early-exit pat...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the net/sched module, there is a issue where sfq: clamping the quantum value can lead to a signed overflow condition, causing a soft lockup. The sfqinit function sets q-quantum to pschedmtuqdiscdevsch unsigned. A device with a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915 – Avoid nss underflow in mt7915mcugetstanss If a peer’s VHT/HE MCS map has no supported spatial streams all fields are 0x3, the loop exits with nss == 0, and the function returns a value of u8-1 255. This value...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blkrqpayloadbytes Commit 25e5cb780e62 “nvme-tcp: fix possible crash in writezeroes processing” determined that blkrqpayloadbytes must not be read without first checking blkrqnrphyssegments...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fixed a use-after-free in siwaccept siwaccept looks up the QP provided by the user space. If that QP is already in RTS, the function jumps to error cleanup before associating the incoming CEP with it. The cleanup checks...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Futex: Prevent RCUWait use-after-free during requeue PI On PREEMPTRT, FUTEXCMPREQUEUEPI can trigger a KASAN report slab-out-of-bounds in futexrequeuepicomplete, when calling rcuwaitwakeup. The futexq used by futexwaitrequeuepi is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hfi1: Preserves unit 0 in case of allocation failure. The hfi1freedevdata function assumes that the device was added to the unit table and erases dd-unit unconditionally. If xaallocirq fails, the zero-initialized unit...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Audit: Avoid dropping the live tree reference in the fsnotify autoremove operation. The auditdelrule function is used for both netlink deletion templates and internal fsnotify autoremove operations. In the former case, a parsed...