Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Invoking pmgenpdremove before freeing genpd. The function pmgenpdremove is called to unregister the module from the global list before releasing the acpgenpd memory. Additionally, the pointer after freeing the memory ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/tls: tlsswspliceread fails after an asynchronous decryption failure. When an asynchronous decryption fails, tlsdecryptdone records the error in ctx-asyncwait.err and calls tlserrabort, which stores the error in skerr. Both...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not trim a device which is not writeable BUG There is a bug report that btrfs/242 can randomly fail with the following NULL pointer dereference: run fstests btrfs/242 at 2026-06-01 10:25:08 BTRFS: device fsid...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vxlan: Do not reuse the cached iphdr value after skbtunnelcheckpmtu. skbtunnelcheckpmtu may change skb-head. Reusing the old iph after skbtunnelcheckpmtu can lead to a Use-After-Free error. Instead, use iphdrskb, as done in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the thunderbolt module, there is a issue where the value of entry-value is of type u32, while entry-length is of type u16. The sum of these two values is performed in u32, and the result wraps. A malicious XDomain peer can...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length The presterafwhdrparse function reads the firmware header before checking whether the firmware image contains that header. Images that are shorter than struct presterafwheader are...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses When a MAC address is updated in batadvdatentryadd, it is done using a simple copy function. A parallel reader might only see parts of this update. In the worst case, the reader ma...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: A memory leak has been fixed in the ieee80211registerhw function. If kmemdup fails while copying supported band structures, the error path jumps to failrate. This bypasses ratecontroldeinitialize and results in th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drbd: Rejects data replies with an out-of-range payload size. The recvdlessread function receives a PDATAREPLY from a peer into the bio of an outstanding read request. The payload length provided by the peer is stored as the...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sysfs: Do not remove an existing directory during update failures When the sysfsupdategroup function is called for a named group, and the createfiles function fails e.g., due to -ENOMEM, the internalcreategroup function calls...

Astra Linux – Vulnerability in Firefox and Thunderbird

A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 112, Focus for Android 112,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Release the meshsendcancel command when it is cancelled. The meshsendcancel function queues the pending command with a NULL destroy callback. It is only released after the sendcancel function is executed. A...

Astra Linux – Vulnerability in Redis

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command specifically, a SET command. NOTE: this issue was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have any safety guarantees related to...

Astra Linux – Vulnerability in dcmtk

It was discovered that DCMTK v3.6.9+DEV contains a buffer overflow issue through the component /dcmimgle/diinpxt.h...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: SCTP: The comparison of MACs has been fixed to require constant-time operations. To prevent timing attacks, MACs need to be compared in constant-time. Use the appropriate helper function for this purpose...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libceph: A potential nullptrderef issue has been prevented in cephhandleauthreply. If a message of type CEPHMSGAUTHREPLY contains a zero value for both protocol and result, this is currently not treated as an error. When...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mctp: Serial: Handling of zero-length frames to prevent RX buffer overflow The MCTP serial receive state machine reads the frame length byte in the mctpSerialPushHeader function’s case 2, and validates it as an upper-bound-only...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: Fix use-after-free in bpfitertcpestablishedbatch reqskqueuehashreq publishes a TCPNEWSYNRECV requestsock onto the ehash chain, releases the bucket lock, and only afterwards sets rskrefcnt to 3. Lockless readers such as...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: sctp: Validated the length of the embedded INIT chunk and the length of the address list in the cookie. sctpunpackcookie only checks that the length of the embedded INIT chunk does not exceed the remaining cookie payload, but...