Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fixed an infinite loop that occurred when parsing an invalid IRQ value. When an invalid value is passed via the “eisairqedge=” kernel command-line parameter e.g., “eisairqedge=16,5”, the eisairqsetup function prints...

Astra Linux – Vulnerability in libonig

A issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in the file gb18030.c, a UChar pointer was dereferenced without checking whether it pointed to the end of the matched string. This resulted in a buffer overflow...

Astra Linux – Vulnerability in Thunderbird

An attacker may carry out a DoS attack to prevent a user from sending encrypted emails to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self-signature, and the Thunderbird user imports the crafted key, then Thunderbird may attempt to use the inval...

Astra Linux – Vulnerability in WebKit2GTK

This issue has been resolved through improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...

Astra Linux – Vulnerability in WebKit2GTK

A vulnerability related to out-of-bounds reads has been addressed through improved input validation. This issue is fixed in Safari 18.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6. Processing maliciously crafted web content may disclose internal states of...

Astra Linux – Vulnerability in WebKit2GTK

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Can: bcm: track a single source interface for ANYDEV timeout/throttle operations. An ANYDEV RX operation if index == 0 with an active RX timeout and/or throttle timer does not have defined semantics when matching frames from...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu/gfx10: replace BUGON with WARNON There is no need to crash the kernel in these cases. Cherry-picked from commit ac6f00beb658239bced4aaed9efbb04a35348d48...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2device on probe failure The si476xradioprobe function registers radio-v4l2dev before allocating the V4L2 controls and before registering the video device. If any of these steps fail, the probe...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: core: Properly handle filling DMA padding bytes in scsiallocsgtables. During fuzz testing, the following issue was discovered: BUG: KMSAN: Missing bytes in dmamapsgattrs+0x217/0x310, dmamapsgattrs+0x217/0x310,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: renesasusb3: Validates the endpoint index in standard request handlers. The GETSTATUS and SET/CLEARFEATURE handlers extract the endpoint number from the wIndex provided by the host, without any validation. This issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: Bound iinlinexattrsize for inodes without inlinexattr When the flexibleInlinexattr feature is enabled, doread inode the iinlinexattrsize value from disk: c if f2fssbhasflexibleInlinexattrsbi fi-iinlinexattrsize =...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Vulnerability: Out-of-bounds write during RX overflow Problem: The stm32rxdone function appends each received CEC byte to the rxmsg.msg array using rxmsg.len as the write index. This index is incremented on every...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improved locking user experience In the case where the first block is locked or a few first blocks, if the user wants to fully unlock the device, there are two possibilities: - Either they request to unlock the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: libceph: Rejects monmaps that advertise zero monitors. A message of type CEPHMSGMONMAP contains a monmap sent from a monitor to the client. This monmap contains information about the existing monitors in the cluster. Currently, a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: rds: clearing isends on setup unwind The RDS IB connection teardown path is modified so that it can be executed during partial startup and upon repeated shutdown attempts. NULL pointers are used to distinguish resources that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In ceph, there is a fix for a UAF Uninitialized Address Fault in kickflushingcaps, where a CF entry is freed during the unlock process. In listforeachentry, the variable ci-icapflushlist is iterated over, but the variable icephlo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: use managed regmapfield allocations The regmapfield objects allocated at the player initialization stage are never freed, and may leak resources if the driver is removed. Switch to devmregmapfieldalloc to automatically...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: Fixed a potential memory leak in nvidiafbprobe. In nvidiafbprobe, the memory allocated for modelist in nvidiasetfbinfo is not freed during subsequent error paths. This issue was addressed by calling fbDestroyModeli...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - bpf: The functions taskto inode and inetconnestablished have been removed from the sleepable LSM hooks. bpflsmtaskto inode is called under rcureadlock, and bpflsminetconnestablished is called from a softirq context. Therefor...