Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: core: Properly handle filling DMA padding bytes in scsiallocsgtables. During fuzz testing, the following issue was discovered: BUG: KMSAN: Missing bytes in dmamapsgattrs+0x217/0x310, dmamapsgattrs+0x217/0x310,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: renesasusb3: Validates the endpoint index in standard request handlers. The GETSTATUS and SET/CLEARFEATURE handlers extract the endpoint number from the wIndex provided by the host, without any validation. This issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: Bound iinlinexattrsize for inodes without inlinexattr When the flexibleInlinexattr feature is enabled, doread inode the iinlinexattrsize value from disk: c if f2fssbhasflexibleInlinexattrsbi fi-iinlinexattrsize =...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Vulnerability: Out-of-bounds write during RX overflow Problem: The stm32rxdone function appends each received CEC byte to the rxmsg.msg array using rxmsg.len as the write index. This index is incremented on every...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improved locking user experience In the case where the first block is locked or a few first blocks, if the user wants to fully unlock the device, there are two possibilities: - Either they request to unlock the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: libceph: Rejects monmaps that advertise zero monitors. A message of type CEPHMSGMONMAP contains a monmap sent from a monitor to the client. This monmap contains information about the existing monitors in the cluster. Currently, a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: rds: clearing isends on setup unwind The RDS IB connection teardown path is modified so that it can be executed during partial startup and upon repeated shutdown attempts. NULL pointers are used to distinguish resources that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In ceph, there is a fix for a UAF Uninitialized Address Fault in kickflushingcaps, where a CF entry is freed during the unlock process. In listforeachentry, the variable ci-icapflushlist is iterated over, but the variable icephlo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: use managed regmapfield allocations The regmapfield objects allocated at the player initialization stage are never freed, and may leak resources if the driver is removed. Switch to devmregmapfieldalloc to automatically...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: Fixed a potential memory leak in nvidiafbprobe. In nvidiafbprobe, the memory allocated for modelist in nvidiasetfbinfo is not freed during subsequent error paths. This issue was addressed by calling fbDestroyModeli...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - bpf: The functions taskto inode and inetconnestablished have been removed from the sleepable LSM hooks. bpflsmtaskto inode is called under rcureadlock, and bpflsminetconnestablished is called from a softirq context. Therefor...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe The serial-u16550 driver blindly trusts that the given devptr-id value is within the appropriate card index range during the probe phase. It’s fine for the devices created b...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: rejecting an arena whose nfree value is lower than the number of lanes. The nfree field in the BTT info block, which represents the number of reserved free blocks, is read from the medium without validation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu – fixed a race condition in the resetdevice sysfs callback. The imspcuresetdevice sysfs callback calls imspcuexecutecommand without acquiring pcu-cmdmutex. This can lead to data races and corruption of the shared...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevents partial address patches. In the case where only one of lo/hi is valid, patching could result in a bad address being written into the firmware...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: clk: qcom: gdsc: removing the per-domain genpds in gdscunregister gdscunregister removes the OF provider entry and dismantles the parent/subdomain connections. However, it never calls pmgenpdremove on the individual...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core using putdevice. In host1xdeviceadd, if...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fprinter: Only use kref for successful opening of the character device. The printeropen function returns -EBUSY when the character device is already open. However, it increments the dev-kref regardless of the return...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid double-reading of reqqmap in qla2x00errorentry. The qla2x00errorentry function reads ha-reqqmapque twice: once for the NULL check and again when assigning it to req. The map slot is cleared by qla25xxfreereqq...

Astra Linux – Vulnerability in Colorod

There are two information disclosure vulnerabilities in colord, and they reside in colord/src/cd-device-db.c and colord/src/cd-profile-db.c, respectively. These vulnerabilities exist because the 'errmsg' of 'sqlite3exec' does not get released after use, whereas libxml2 requires that the caller mu...