Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: comedi: vmk80xx: fix transfer-buffer overflows The driver utilizes USB transfer buffers sized according to endpoint specifications; however, until recently there were no validation checks on these buffer sizes. The commit...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AFALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccpaescomplete restores AESBLOCKSIZE bytes into the caller’s IV buffer; since RFC3686 skciphers expose an 8-byte IV,...

Astra Linux – vulnerability in xrdp

xrdp is an open source project that provides a graphical login to remote machines using the Microsoft Remote Desktop Protocol RDP. xrdp versions prior to 0.9.21 contain a buffer overflow in the audinsendopen function. No known workarounds exist for this issue; users are advised to upgrade...

Astra Linux – vulnerability in ffmpeg5

The buffer overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avfshowspectrum.c:1789:52 component in showspectrumpicrequestframe...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter iterates through bmg160sampfreqtable to find an entry matching the bwbits value read from the chip: for i = 0; i ARRAYSIZEbmg160sampfreqtable; ++i ...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Avoid buffer overread in ath11kwmitlvoprx Currently, in ath11kwmitlvoprx, the firmware buffer is read without first verifying that the buffer has enough data to hold a header. This could result in a buffer overread...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed lacks locking and suffers from a buffer overflow. sun4issprnggenerate fails ...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: iavf: Fixed the handling of dummy receive descriptors. Fixed a memory leak caused by improper handling of dummy receive descriptors. iavfgetrxbuffer now sets the rxbuffer return value for dummy receive descriptors. Without thi...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlinkunicast netlinkattachskb checks for the socket’s read memory allocation constraints. First, it performs: rmem skrcvbuf to determine whether the newly allocated rmem value fits withi...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer using strcspncdshead, " ", but then parses the keyword using %s. The %s conversion skips leading...

Astra Linux – vulnerability in aom

The aomdsp/noisemodel.c file in libaom within AOMedia prior to 2021-03-24 contains a buffer overflow...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: A potential buffer underflow has been fixed in ath11khalrxmsdulistget. When the first entry in msdudetails has a zero buffer address, the code accesses msdudetailsi - 1 when i == 0, resulting in a buffer underflow...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: cap received transmit credits The interrupt-status packet reports the transmit credits returned by the device. The edgeinterruptcallback function adds the 16-bit value to txCredits without checking...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: reduce the MHI channel buffer length to 8KB Currently, the buflen field in ath11kmhiconfigqca6390 is set to 0, causing MHI to use the default size of 64KB for allocating channel buffers. This may fail under certain...

Astra Linux – vulnerability in mariadb-10.3

It has been discovered that MariaDB Server versions 10.7 and earlier contain a global buffer overflow in the decimalbinsize component, which can be exploited via specially crafted SQL statements...

Astra Linux – vulnerability in edk2

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in printcpustallinfo The rcuc-starvation output from printcpustallinfo may overflow the buffer if there is a large difference in jiffies. The situation may seem unlikely, but computers sometimes get very...

Astra Linux – Vulnerability in atftp

In tftpdfile.c in atftp up to 0.7.4, there is a buffer overflow issue due to improper handling of buffer-size parameters, which does not correctly account for combinations of data, OACK, and other options...