10136 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host sends messages called SYNTHHIDINITIALDEVICEINFO, which contain a HID descriptor followed by the report descriptor bytes. The function...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fixed a use-after-free issue when processing MLD queries. When processing an MLD query, a pointer to the multicast group address is retrieved during initial packet parsing. This pointer is later dereferenced without...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: The VGA arbiter client is released upon a failure in registerdevice. The reordering in the “Fixes” commit below moved vfiopcivgainit to become the last failure point in vfiopcicoreregisterdevice, without introducing a...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: The Zero SFP DMA buffer is not zeroed in FRU/I2C bsg handlers. The FRU and I2C bsg handlers stage their transfers in a DMAPOOLSIZE 256-byte buffer, which is obtained through dmapoolalloc. This buffer does not zero...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: The issue involves stabilizing the use of the tty reference in kbdkeycode, using ttyportttyget. kbdkeycode reads vc-port.tty without acquiring a proper reference to the tty object. This occurs while competing with conshutdown,...
Astra Linux – Vulnerability in Chromium
Uninitialized use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Uninitialized use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
The out-of-bounds reading in Skia within Google Chrome before version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The "Out of bounds" vulnerability in Google Chrome before version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
A vulnerability was identified in Google Chrome before version 150.0.7871.46; it allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Before version 149.0.7827.53, using the "OUT OF BORD" feature in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In hciuart, issues related to Use-After-Free UAF and Null Pointer Dereference NPD conditions were observed during the lifecycle management of hciuart. The primary issue arises because the workqueues initready and...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Input: elani2c – prevents division by zero and arithmetic underflow. The Elan I2C touchpad driver queries the device for its physical dimensions and trace counts to calculate the device’s resolution and width. However, if the...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe The serial-u16550 driver blindly trusts that the given devptr-id value is within the appropriate card index range during the probe phase. It’s fine for the devices created b...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: In the proc subsystem, the function ptracemayaccess is protected by execupdatelock FD links. The functions procpidgetlink and procpidreadlink currently look up the task once from the pid, then perform the ptrace access check on...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevents partial address patches. In the case where only one of lo/hi is valid, patching could result in a bad address being written into the firmware...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fixed an issue where the cs84xx structure was used after it had been freed, leading to a use-after-free condition during host teardown. The qla84xxputchip function releases the last reference to the ha-cs84xx...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args. This will assist in validating the userq input arguments and rejecting invalid userq requests during IOCTLs...