Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe The serial-u16550 driver blindly trusts that the given devptr-id value is within the appropriate card index range during the probe phase. It’s fine for the devices created b...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: rejecting an arena whose nfree value is lower than the number of lanes. The nfree field in the BTT info block, which represents the number of reserved free blocks, is read from the medium without validation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu – fixed a race condition in the resetdevice sysfs callback. The imspcuresetdevice sysfs callback calls imspcuexecutecommand without acquiring pcu-cmdmutex. This can lead to data races and corruption of the shared...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevents partial address patches. In the case where only one of lo/hi is valid, patching could result in a bad address being written into the firmware...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: clk: qcom: gdsc: removing the per-domain genpds in gdscunregister gdscunregister removes the OF provider entry and dismantles the parent/subdomain connections. However, it never calls pmgenpdremove on the individual...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core using putdevice. In host1xdeviceadd, if...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fprinter: Only use kref for successful opening of the character device. The printeropen function returns -EBUSY when the character device is already open. However, it increments the dev-kref regardless of the return...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid double-reading of reqqmap in qla2x00errorentry. The qla2x00errorentry function reads ha-reqqmapque twice: once for the NULL check and again when assigning it to req. The map slot is cleared by qla25xxfreereqq...

Astra Linux – Vulnerability in Colorod

There are two information disclosure vulnerabilities in colord, and they reside in colord/src/cd-device-db.c and colord/src/cd-profile-db.c, respectively. These vulnerabilities exist because the 'errmsg' of 'sqlite3exec' does not get released after use, whereas libxml2 requires that the caller mu...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: The isotprelease function looked up the bound network device using devgetbyindex, utilizing the stored ifindex. During device unregistration, the device is removed from the ifindex hash before the NETDEVUNREGISTER notifier chain...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nfc: llcp: Reading llcpsock-local under the socket lock in getsockopt. nfcllcpgetsockopt reads llcpsock-local before locksocksk, and then dereferenced the cached pointer within the locked region. llcpsock.bind assigns and clea...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: macsec: Fixed the replay protection issue when pn wraps at U32MAX. In macsecpostdecrypt, when pn is U32MAX, pn + 1 causes an overflow from a 32-bit value to 0. As a result, the first branch never executes. If nextpnhalves.lower i...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: can: j1939: implemented the NETDEVUNREGISTER notification handler syzbot reports that: unregisternetdevice: waiting for vcan0 to become available. Usage count = 2 The problem is that the j1939 protocol did not have a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: Replace the direct dequeue call with peek and qdiscdequeuepeeked. When taprio’s software path peeks a non-work-conserving child qdisc, the child stashes the peeked skb in its gsoskb. Then, tapriodequeuefromt...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tpm: Makes TPM character devices non-seekable. TPM character devices expose a sequential command/response interface. However, their open handlers leave FMODEPREAD and FMODEPWRITE enabled. After a command leaves a response pending...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on buildskb failure When buildskb fails in hip04rxpoll, the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrit...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fixed an issue where data was not sent after throttling was applied. If the port is closed while throttling is in effect, the “urb” data is never resent. The port will not receive any further data unt...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: rds: handling of incoming messages that cross network namespace boundaries The rdsfindbound function looks up the destination socket using a global hashtable keyed solely on addr, port, scopeid. Network namespaces are not part...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: In the bitcursor function, the glyph index is checked for boundaries. The function retrieves the glyph under the cursor using the following code: c c = scrreadwvcpos; src = vcfont.data + c & charmask w height; Her...

Astra Linux – Vulnerability in Squid

Squid is vulnerable to a Denial of Service attack, where a remote attacker can carry out a buffer overflow attack by writing up to 2 MB of arbitrary data into heap memory when Squid is configured to accept HTTP Digest Authentication...