Astra Linux – Vulnerability in Chromium

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: The reuseport cBPF prog is freed after the RCU grace period. Eulgyu Kim reported the issue below with a reproduction example. The reproduction example sets up a UDP reuseport group with a cBPF prog and replaces it with a new...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: xfrm: natkeepalive: avoid double-free on send error The natkeepalivesend function frees the keepalive packet whenever the IPv4 or IPv6 send helper reports an error. This cleanup is only necessary before the packet is passed to th...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fixed the zerocopy completion for multi-skbs sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned use...

Astra Linux – Vulnerability in Chromium

In version 152.0.7977.65, an uninitialized resource in Dawn in Google Chrome allowed a remote attacker to potentially read memory within the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: bridge: Stop the “fast-leave” operation after deleting a port group. The br Multicast Leave Group function iterates over mp-ports with pp = &p-next in its “fast-leave” path. After br Multicast DelPg removes p, the loop...

Astra Linux – Vulnerability in Chromium

The use of after free in Extensions in Google Chrome before version 151.0.7922.72 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML UXSS via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Leakage of side-channel information in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Network of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In V8 in Google Chrome, prior to version 151.0.7922.72, it was possible for a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Views in Google Chrome before version 151.0.7922.109 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: The array skb2-cb was cleared in ip6ip6err. ip6ip6err clones an outer IPv6 ICMP error packet, moves it into the quoted inner IPv6 packet, and then passes the cloned packet to icmpv6send. The cloned packet still carries...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection. An attacker who injects interrupts while the Safe-RET mitigation is executing on machines affected by SRSO can neutralize the safe return sequence, potentially leading t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ppp: Deferring the freeing of channels to an RCU callback via callrcu ensures that any ongoing pppol2tprecv operations are protected during the grace period. This prevents unexpected dereferencing of channels that were just...

Astra Linux – Vulnerability in Chromium

Before version 152.0.7977.65, using free after in the Chromecast with Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions and access a privileged page via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: SCTP: Stream: Fully roll back denied add-stream states When the request to add a stream ADDOUTSTREAMS is denied, SCTP only reduces the size of the queued chunks and lowers the outcnt value. This leaves the removed stream’s metada...

Astra Linux – Vulnerability in Chromium

Before version 151.0.7922.109, using a GPU in Google Chrome on Linux allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...