Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: rds: clearing isends on setup unwind The RDS IB connection teardown path is modified so that it can be executed during partial startup and upon repeated shutdown attempts. NULL pointers are used to distinguish resources that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In ceph, there is a fix for a UAF Uninitialized Address Fault in kickflushingcaps, where a CF entry is freed during the unlock process. In listforeachentry, the variable ci-icapflushlist is iterated over, but the variable icephlo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serializes the flash version reading performed in the reset handler. The “update cache versions without reset” sysfs reset operation 0x20261 calls getflashversion, which reads hardware flash registers, without...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: use managed regmapfield allocations The regmapfield objects allocated at the player initialization stage are never freed, and may leak resources if the driver is removed. Switch to devmregmapfieldalloc to automatically...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: Fixed a potential memory leak in nvidiafbprobe. In nvidiafbprobe, the memory allocated for modelist in nvidiasetfbinfo is not freed during subsequent error paths. This issue was addressed by calling fbDestroyModeli...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - bpf: The functions taskto inode and inetconnestablished have been removed from the sleepable LSM hooks. bpflsmtaskto inode is called under rcureadlock, and bpflsminetconnestablished is called from a softirq context. Therefor...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe The serial-u16550 driver blindly trusts that the given devptr-id value is within the appropriate card index range during the probe phase. It’s fine for the devices created b...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: rejecting an arena whose nfree value is lower than the number of lanes. The nfree field in the BTT info block, which represents the number of reserved free blocks, is read from the medium without validation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu – fixed a race condition in the resetdevice sysfs callback. The imspcuresetdevice sysfs callback calls imspcuexecutecommand without acquiring pcu-cmdmutex. This can lead to data races and corruption of the shared...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevents partial address patches. In the case where only one of lo/hi is valid, patching could result in a bad address being written into the firmware...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: clk: qcom: gdsc: removing the per-domain genpds in gdscunregister gdscunregister removes the OF provider entry and dismantles the parent/subdomain connections. However, it never calls pmgenpdremove on the individual...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core using putdevice. In host1xdeviceadd, if...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fprinter: Only use kref for successful opening of the character device. The printeropen function returns -EBUSY when the character device is already open. However, it increments the dev-kref regardless of the return...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid double-reading of reqqmap in qla2x00errorentry. The qla2x00errorentry function reads ha-reqqmapque twice: once for the NULL check and again when assigning it to req. The map slot is cleared by qla25xxfreereqq...

Astra Linux – Vulnerability in Colorod

There are two information disclosure vulnerabilities in colord, and they reside in colord/src/cd-device-db.c and colord/src/cd-profile-db.c, respectively. These vulnerabilities exist because the 'errmsg' of 'sqlite3exec' does not get released after use, whereas libxml2 requires that the caller mu...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: The isotprelease function looked up the bound network device using devgetbyindex, utilizing the stored ifindex. During device unregistration, the device is removed from the ifindex hash before the NETDEVUNREGISTER notifier chain...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nfc: llcp: Reading llcpsock-local under the socket lock in getsockopt. nfcllcpgetsockopt reads llcpsock-local before locksocksk, and then dereferenced the cached pointer within the locked region. llcpsock.bind assigns and clea...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: macsec: Fixed the replay protection issue when pn wraps at U32MAX. In macsecpostdecrypt, when pn is U32MAX, pn + 1 causes an overflow from a 32-bit value to 0. As a result, the first branch never executes. If nextpnhalves.lower i...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: can: j1939: implemented the NETDEVUNREGISTER notification handler syzbot reports that: unregisternetdevice: waiting for vcan0 to become available. Usage count = 2 The problem is that the j1939 protocol did not have a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: Replace the direct dequeue call with peek and qdiscdequeuepeeked. When taprio’s software path peeks a non-work-conserving child qdisc, the child stashes the peeked skb in its gsoskb. Then, tapriodequeuefromt...