8433 matches found
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: crypto: tegra – Do not transfer requests when tegrainit fails The tegracmacinit or tegrashainit functions may return an error when memory is exhausted. In such cases, requests should not be transferred when an error occurs...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: HID: winwing: Added a NULL check in winwinginitled. The devmkasprintf function can return a NULL pointer if it fails, but this returned value is not checked in winwinginitled. A NULL check should be added in winwinginitled to...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: safesetid: Check the size of policy writes. syzbot attempts to write a buffer with a large size to a sysfs entry. The writing is handled by handlepolicyupdate, which triggers a warning in kmalloc. Check the size specified for the...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fixed a potential out-of-bounds issue related to read/write operations via C45 clause 45 of the mdiobus interface. When using publicly available tools like ‘mdio-tools’ to read/write data from/to network interfaces v...
Astra Linux – Vulnerability in Intel Microcode
In some IntelR XeonR processor memory controller configurations when using IntelR SGX, there is a check for improper conditions that may allow a privileged user to potentially enable privilege escalation through local access...
Astra Linux – Vulnerability in Keepalived
The vulnerability of the parser.c component in the Keepalived network traffic balancing system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...
Astra Linux – Vulnerability in mongo-c-driver
The bsonstringappend function in the MongoDB C Driver may be vulnerable to a buffer overflow. In this scenario, the function might attempt to allocate a buffer that is too small, which could lead to memory corruption in the neighboring heap memory. This issue affects versions of libbson prior to...
Astra Linux – Vulnerability in python-tornado
Tornado is a Python web framework and asynchronous networking library. When Tornado’s “multipart/form-data” parser encounters certain errors, it logs a warning but continues attempting to parse the remaining data. This allows remote attackers to generate an extremely large volume of logs,...
Astra Linux – Vulnerability in libxml2
In libxml2 versions before 2.12.10 and 2.13.x before 2.13.6, there is a stack-based buffer overflow in the xmlSnprintfElements function in the valid.c file. To exploit this vulnerability, DTD validation must be performed for untrusted documents or untrusted DTDs. NOTE: This vulnerability is simil...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: eth:bnxt: fixed the issue of missing ring index trimming on the error path. The commit under “Fixes” converted txprod to a free-running state, but failed to mask this issue on the Tx error path. This caused failures under error...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/xe: The local fence was used in the error path of xemigrateclear. The purpose of the error path in xemigrateclear is to wait for the locally generated fence before returning. The code is waiting for m-fence, which could be th...
Astra Linux – Vulnerability in requests
Requests is an HTTP library. Prior to version 2.32.0, when making requests through a Requests Session, if the first request was made with verify=False to disable certificate verification, all subsequent requests to the same host would continue to ignore certificate verification, regardless of...
Astra Linux – Vulnerability in ffmpeg
A reachable assertion in FFmpeg’s git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service DoS by opening a crafted AAC file...
Astra Linux – Vulnerability in usbutils
The vulnerability of the USButils utility relates to the improper release of memory before deleting the last link. Exploiting this vulnerability allows a hacker to cause a service failure...
Astra Linux – Vulnerability in linux-astra-modules-6.1, linux-astra-modules-6.12
The vulnerability of Linux Astra Modules’ kernel modules is related to insufficient blocking measures. Exploiting this vulnerability allows an attacker to cause service failures...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevention of division by zero The user can set any speed value. If the speed is greater than UINTMAX/8, a division by zero is possible. Found by the Linux Verification Center linuxtesting.org with SVACE...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: A error check in npcmvideoeceinit has been fixed. When the functionoffinddevicebynode fails, it returns NULL instead of an error code. Therefore, the corresponding error check logic should be modified to check...
Astra Linux – Vulnerability in Perl
A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38, and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand side of the tr operator, Sdotransinvmap can overflow the destination...