Astra Linux – Vulnerability in libxml2

The parser.c file in libxml2 before version 2.9.5 does not prevent infinite recursion in parameter entities...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick, specifically in the code file coders/bmp.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values that are outside the range of the type unsigned int. This likely leads to a disruption in the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: fixed the issue where VF bring-up affected the promiscuous state of PF. The Mbox handling of nixsetrxmode for a VF with promiscuous and allmulti flags set to false causes the deletion of the PF’s promiscuous and...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/cma: Fixed a crash in the cmaneteventworkhandler function. The struct rdmacmid contains a member “struct workstruct network”, which is reused to queue cmaneteventworkhandlers onto the cmawq. The crash1 can occur if more...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe The snddummyprobe function blindly trusts that the given devptr-id value is within the proper card index range. It’s fine for the devices created by the driver during the module pro...

Astra Linux – Vulnerability in Chromium

The use of uninitialized resources in the GPU in Google Chrome prior to version 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM – Inject UD for INVLPGA if EFER.SVME=0 INVLPGA should cause a UD when EFER.SVME is not set. Add a check to properly inject UD when EFER.SVME=0. sean: tag for stable@...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - riscv: Fixed corruption of registers caused by uninitialized cregs during errors. - compatriscvgprset: Calls cregsto regs v without condition, even when userregsetcopyin fails. Since cregs is an uninitialized stack variable,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: Acquiring the initmm lock during huge vmap operations is necessary to prevent a UAF use-after-free in ptdump. The patch series “mm: fix UAF caused by race between ptdump and vmap pgtable freeing” addresses this issue ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: blk-mq: Use a quiesced elevator switch when reinitializing queues. The hctx’s runwork function may race with the elevator switch during the reinitialization of hardware queues. In this context, the queue is merely frozen, but...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: libceph: Two unsafe bare decode operations in decodelockers were fixed. The decodelockers function in clslockclient.c contains two bare decode operations that allow a malicious or compromised OSD to trigger a slab-out-of-bound...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: tls: In the tls.AppendFrag function, there is a potential out-of-bounds write vulnerability. This issue was detected using syzkaller and a local syzbot instance running on top of a netdevsim TLS offload emulation. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fixed a potential UAF in MLD delayed work There is a race condition between device destruction and the processing of incoming MLD queries, leading to a Use-After-Free situation in the MLD delayed work. During device...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: svcrdma: Fixed pclforeachsegment for empty chunks. When a parsed chunk list contains a chunk whose chsegcount is zero, pclforeachsegment calculates its inclusive upper bound as &chunk-chsegmentschsegcount - 1. Since chsegcount...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: ipset – Do not update comments from the kernel-side hash add. The mtyperesize function copies comment pointers using memcpy, not the comment objects themselves. During the period after an entry is copied but before...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: The flushing of tasks operates in a dependency order. virtiovsockremove stops the virtqueue and then flushes each task before freeing the enclosing virtiovsock. The current order does not take into account the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: NFSD: Prevent lock owners from being used after free during client teardown destroyclient releases a client’s open owners. However, a lock owner whose only reference is a blocked lock nbl remains on clownerstrhashtbl...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Futex: Prevent RCUWait use-after-free during requeue PI On PREEMPTRT, FUTEXCMPREQUEUEPI can trigger a KASAN report slab-out-of-bounds in futexrequeuepicomplete, when calling rcuwaitwakeup. The futexq used by futexwaitrequeuepi is...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok

In doProlog, within xmlparse.c of the Expat library also known as libexpat, there is an integer overflow issue related to mgroupSize before version 2.4.3...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: In the seq function, there is a issue where closing a re-opened queue timer occurs in the destructor. The queuedelete function closes the queue timer and then frees it. The sndseqtimerclose function clears q-timer-timeri. T...