9470 matches found
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in the keyboard interface in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return of queued buffers upon failure in startstreaming The vb2 framework passes buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: clk: visconti: Ensure that clkinitdata is fully initialized. The clkinitdata structure contains several mutually exclusive members, which are used by different methods to specify the possible parents of a clock. This allows drive...
Astra Linux – Vulnerability in Chromium
Before version 88.0.4324.96, using Blink with a "after free" mechanism allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp-txringi.txstatus are released. However, this release is repeated again when the device is unbound...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations of WebAuthentication in Google Chrome prior to version 96.0.4664.45 allowed a remote attacker to leak cross-origin data through a crafted HTML page...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: - misc: ibmasm: A flaw in ibmasmhandlemouseinterrupt caused an out-of-bounds MMIO read. ibmasmhandlemouseinterrupt performed an out-of-bounds MMIO read when the queue reader or writer index from hardware exceeded REMOTEQUEUESI...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Fork: Defer linking of the vma until vma is fully initialized. Thorvald reported a WARNING 1. The root cause of the issue lies in a race condition: - CPU 1: fork; - hugetlbfsfallocate; - dupmmap: hugetlbfspunchhole; -...
Astra Linux – Vulnerability in hwloc
A issue was discovered in open-mpi hwloc 2.1.0: attackers can cause a denial of service or other unspecified impacts through glibc-cpuset in topology-linux.c...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 has an improper restriction on write operations within the bounds of a memory buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Network section of Google Chrome before version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: enetc: avoid deadlock in enetctxonesteptstamp This lockdep message explains it better than I could: ================================ WARNING: inconsistent lock state 6.2.0-rc2-07010-ga9b9500ffaac-dirty 967 Not tainted...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ice: Check the VF VSI Pointer Value in icevcaddfdirfltr. As mentioned in the commit baeb705fd6a7 “ice: Always check the VF VSI Pointer Values”, we need to perform a null pointer check on the return value of icegetvfvsi before usi...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect The submitted write URBs are not stopped when the function close is called. Therefore, they need to be stopped unconditionally when the function disconnect is called, to avoid...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: geneve: It is required that CAPNETADMIN is set in the device’s netns for the changelink function. A tunnel changelink operates on at most two netns: devnetdev and the sticky underlay netns geneve-net. These differences arise...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/i915: A flaw that prevents NULL driverdata values in i915pciprobe. The pcimatchdevice function may return the dummy pcideviceidany entry when a device is forced-bound via sysfs using driveroverride. In this case, -driverdata ...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: In the tunxdpone function, when buildskb fails, the function sets ret to -ENOMEM and jumps to the out label. This causes the function to return without freeing the page that was allocated by vhostnetbuildxdp for the frame. Simila...
Astra Linux – Vulnerability in Chromium
Before version 95.0.4638.69, using Web Transport in Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: rtla/osnoise: Prevent NULL dereferencing in error handling. If the "tool-data" allocation fails, there is no need to call osnoisefreetop. In fact, doing so will lead to a NULL dereferencing...