Astra Linux – Vulnerability in Firefox and Thunderbird

Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 105 and Firefox ESR 102.3. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in htmldoc

A flaw was discovered in htmldoc in version 1.9.12. A heap buffer overflow in pspdfpreparepage, located in ps-pdf.cxx, may allow for the execution of arbitrary code and cause a denial of service attack...

Copy-Fail

CVE-2026-31431 "Copy Fail" - Local Privilege Escalation Python 3.7+ compatible version including Astra Linux Safe check without exploitation: curl -s https://raw.githubusercontent.com/p401a-ops/Copy-Fail/refs/heads/main/detect.py | python3 Exploitation when prompted, you will need to enter the us...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detaching event groups during removeonexec The perfeventremoveonexec function removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipvs: Do not propagate the “one-packet” flag to synced connections. Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies the connection flags from the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed path resolution in ksmbdvfskernpathcreate. The SMB2 open lookup is rooted at the share using LOOKUPBENEATH, but the create/mkdir/hardlink logic does not use this approach. ksmbdvfskernpathcreate generates an...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: SCTP: Fixed the array size of authhmacs in struct sctpcookie. The authhmacs array in struct sctpcookie is supposed to store a complete SCTPAUTHHMACALGO parameter, which consists of a struct sctpparamhdr followed by N HMAC...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: The pin bridge device is used while NFQUEUE holds a fake dst. The brnetfilter fake rtable is embedded in the struct netbridge and is attached to bridged packets using skbdstsetnoref. If such a packet is queued...

Astra Linux – Vulnerability in Chromium

Before version 152.0.7977.65, using free after in the Chromecast with Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

The use of after free in DevTools in Google Chrome before 152.0.7977.65 allowed a remote attacker to leverage social engineering to execute arbitrary code within the sandbox through a crafted Chrome extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper privilege management in the FileSystem of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering techniques to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of after free in WebRTC in Google Chrome before version 152.0.7977.75 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper input validation in the Preload feature of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policies through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 153.0.8010.36, reading data from out of bounds locations in Google Chrome allowed a remote attacker to read memory outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of uninitialized variables in Skia in Google Chrome prior to version 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before 152.0.7977.65, accessing memory outside the sandbox in Google Chrome allowed a remote attacker to exploit social engineering techniques to read memory through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipc: limits the allocation of the next ID to the valid ID range. The checkpoint/restore sysctl path can request the next SysV IPC ID through ids-nextid. Currently, ipcidralloc forwards that request to idralloc with an open-ended...

Astra Linux – Vulnerability in Chromium

UI misrepresentation in the Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Low...