Astra Linux – Vulnerability in Chromium

Information leaks in the DOM of Google Chrome before version 152.0.7977.65 allowed a remote attacker to bypass web origin policies through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipvs: Do not propagate the “one-packet” flag to synced connections. Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies the connection flags from the...

Astra Linux – Vulnerability in Chromium

A out-of-bounds read in Dawn, enabled before 151.0.7922.72, allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Chromecast within Google Chrome prior to version 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape through malicious network traffic. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Race conditions in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information through a crafted HTML page, using social engineering techniques. Chromium security severity: Low...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed path resolution in ksmbdvfskernpathcreate. The SMB2 open lookup is rooted at the share using LOOKUPBENEATH, but the create/mkdir/hardlink logic does not use this approach. ksmbdvfskernpathcreate generates an...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fixed the zerocopy completion for multi-skbs sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned use...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detaching event groups during removeonexec The perfeventremoveonexec function removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restricts the number of unacked list entries When the unackedlist is not bounded, an attacker could send messages with short lengths and appropriate sequence numbers, followed by gaps, to force the receiver t...

Astra Linux – Vulnerability in Chromium

Before version 150.0.7871.186, using Codecs in Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: sctp: Clear newtransport when removing a peer. sctpprocessasconfparam stores the newly added peer transport in asoc-newtransport. After all parameters in the ASCONF chunk have been processed, sctpsfdoasconf uses this pointer t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: The pin bridge device is used while NFQUEUE holds a fake dst. The brnetfilter fake rtable is embedded in the struct netbridge and is attached to bridged packets using skbdstsetnoref. If such a packet is queued...

Astra Linux – Vulnerability in Chromium

Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass system access restrictions and gain access to a privileged page through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Leakage of side-channel information in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection. An attacker who injects interrupts while the Safe-RET mitigation is executing on machines affected by SRSO can neutralize the safe return sequence, potentially leading t...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 152.0.7977.65 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Audio in Google Chrome before version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the Sandbox of Google Chrome before version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the Sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 151.0.7922.109, using a GPU in Google Chrome on Linux allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

UI representation errors in Geometry in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to leverage social engineering to spoof UI elements through a crafted HTML page. Chromium security severity: Medium...