Astra Linux – Vulnerability in Chromium

Before version 153.0.8010.36, reading data from out of bounds locations in Google Chrome allowed a remote attacker to read memory outside the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of uninitialized variables in Google Chrome prior to version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In hciuart, issues related to Use-After-Free UAF and Null Pointer Dereference NPD conditions were observed during the lifecycle management of hciuart. The primary issue arises because the workqueues initready and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: Fixed a potential memory leak in nvidiafbprobe. In nvidiafbprobe, the memory allocated for modelist in nvidiasetfbinfo is not freed during subsequent error paths. This issue was addressed by calling fbDestroyModeli...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core using putdevice. In host1xdeviceadd, if...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fixed a potential UAF Uninitialized Address Fault when the ddgst mismatch occurs. Shivam Kumar identified this vulnerability through vulnerability testing: When the data digest is enabled on an NVMe/TCP connection, and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: macsec: Fixed the replay protection issue when pn wraps at U32MAX. In macsecpostdecrypt, when pn is U32MAX, pn + 1 causes an overflow from a 32-bit value to 0. As a result, the first branch never executes. If nextpnhalves.lower i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: alps: Fix NULL pointer dereference in alpsrawevent The commit ecfa6f34492c attempts to fix the HID drivers that had missed the previous fix made in 2ff5baa9b527 „HID: appleir: Fix potential NULL dereference at raw event...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: SCTP: Fixed an uninitialized value in sctprcvasconflookup. The sctprcvasconflookup function in net/sctp/input.c only checks that the ASCONF chunk can hold the ADDIP header and a parameter header. It then calls af-fromaddrparam,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xprtrdma: Repost Receive buffers for malformed replies The rpcrdmawcreceive function decrements the transport’s Receive count for each incomplete reply before dispatching a successful Receive to rpcrdmareplyhandler. The handle...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Always failing to free the skb in ieee80211txprepareskb The ieee80211txprepareskb function has three error paths, but only two of them free the skb. The first error path where ieee80211txprepare returns TXDROP doe...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: Fixed a UAF in l2capsockcleanuplisten versus l2capconndel. In btacceptdequeue, a not-yet-accepted child process is unlinked from the parent accept queue. releasesock is called before returning, so the returned sk ha...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass web origin policy through a crafted Chrome extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Before version 151.0.7922.72, using WebSockets with Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Before version 153.0.8010.36, reading data from out of bounds locations in Google Chrome allowed a remote attacker to read memory outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: usb: usbfs: Fixed a use-after-free of the usbdevice variable in usbdevrelease. usbdevrelease releases the reference to the struct usbdevice structure before draining the list of completed async URBs. However, the drain operati...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: bonding: Fixed a NULL pointer dereferencing in bonddoioctl. In bonddoioctl, the slavedev is obtained using devgetbyname. This function may return NULL if the requested interface name does not exist. However, the subsequent...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fou: Do not allow the value 0 for FOUATTRIPPROTO. The issue mentioned in the previous patch still exists in fouudprecv. If FOUATTRIPPROTO is set to 0, the buffer skb is neither freed by fouudprecv nor sent through...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...