Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: afkey: The function pfkeysendmigrate now validates families properly. The syzbot was able to trigger a crash in the skbPut function 1. The issue arises from pfkeysendmigrate not checking whether the families are old or new...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter iterates through bmg160sampfreqtable to find an entry matching the bwbits value read from the chip: for i = 0; i ARRAYSIZEbmg160sampfreqtable; ++i ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: b43: A bound check was added for the firmware-controlled key index in b43rx. The key index controlled by the firmware in b43rx may exceed the size of the dev-key array 58 entries. The existing B43WARNON flag does not enforc...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fixed the double-free issue with interrupt buffer allocation. In lan78xxprobe, the buffer buf was freed twice: once implicitly through usbfreeurbdev-urbintr with the URBFREEBUFFER flag, and again explicitly...

Astra Linux – Vulnerability in Squid

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, a Denial of Service can occur when processing long Gopher server responses due to improper buffer management...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: The index of pagelcns is bound by the log record. The copylcns loop and the redo shortening loop index pagelcns are set to j + i, where i runs up to the lcnsfollow of the log record. This count is only checked against t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed NULL dereference and buffer over-reading in SDP debugfs Why & How The function dpsdpmessagedebugfswrite dereferences connector-base.state-crtc without checking for NULL. A connector may be connected but...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 Widens the blackbox-info buffer to I2CSMBUSBLOCKMAX. The function adm1266nvmemreadblackbox declares a 5-byte stack buffer and passes it to i2csmbusreadblockdata to retrieve the 4-byte BLACKBOXINFO response...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on buildskb failure When buildskb fails in hip04rxpoll, the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrit...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/mlx5: Fixed an integer overflow in the user’s QP buffer size computation setuserbufsize calculates the QP buffer size by shifting the user-provided rq.wqecnt and rq.wqeshift values as signed integers. A sufficiently large...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: A potential buffer underflow has been fixed in ath11khalrxmsdulistget. When the first entry in msdudetails has a zero buffer address, the code accesses msdudetailsi - 1 when i == 0, resulting in a buffer underflow...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu – fixed a heap-buffer-overflow issue in imspcuprocessdata The imspcuprocessdata function processes incoming URB data byte by byte. However, it fails to check whether the readpos index exceeds IMSPCUBUFSIZE. If a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: The Zero SFP DMA buffer is not zeroed in FRU/I2C bsg handlers. The FRU and I2C bsg handlers stage their transfers in a DMAPOOLSIZE 256-byte buffer, which is obtained through dmapoolalloc. This buffer does not zero...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

Astra Linux – Vulnerability in freerdp3

FreeRDP before version 3.29.0 contains a buffer overflow vulnerability in the gateway WebSocket transport libfreerdp/core/gateway/websocket.c. The client’s Pong reply reuses a fixed 1024-byte response stream whose length is not sealed to the actual received Ping payload. Therefore, a malicious...

Astra Linux – Vulnerability in gpac

The GPAC component has a buffer overflow vulnerability in version v391dc7f4d234988ea0bc3cc294eb725eddf8f702. This vulnerability allows attackers to cause a denial of service through the src/scenegraph/svgAttributes.c, svgParseStrings, and gfsvgParseAttribute functions...

Astra Linux – Vulnerability in freerdp3

Versions of FreeRDP prior to 3.31.0 contain a heap buffer overflow vulnerability in the negosendnegotiationrequest function. This function fails to validate the length of the LBLOADBALANCEINFO field before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a...

Astra Linux – Vulnerability in Squid

Squid is a caching proxy for the Web. Prior to version 7.6, due to an improper input validation bug in cache digest reply handling specifically, the peerDigestSwapInMask function in src/peerdigest.cc, Squid was vulnerable to a heap-based buffer overflow. The on-the-wire size of a cache digest mig...

Astra Linux – Vulnerability in Chromium

A buffer overflow in WebGL in Google Chrome on Android prior to version 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: A buffer overflow issue was addressed using a keyed discard mechanism. Since commit 68c5c42567bc “dm-integrity: replacing the forgeable discard filler with a keyed sector marker”, integritymetadata calculates a...