Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: ath11k: Fixed corruption of SKBs in the REO destination ring. While running traffic for a long time, a random RX descriptor filled with the value “0” from the REO destination ring is received. This invalid descriptor...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4fcreplayinode error paths During code review, Joseph found that ext4fcreplayinode calls ext4getfcinodeloc to get the inode location, which holds a reference to iloc.bh that must be released via brels...

Astra Linux – vulnerability in Chromium

A buffer overflow in Video in Google Chrome prior to version 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Prevent buffer overflow in setup handler The setup function uvcfunctionsetup permits control transfer requests with a payload up to 64 bytes UVCMAXREQUESTSIZE. The data stage handler for OUT transfers uses memcp...

Astra Linux – vulnerability in linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing checks in virtionethdrtoskb allowed syzbot to crash the kernel again 1. After the skbsegment function, the buffer may become non-linear nrfrags != 0. However, since the SKBTXSHAREDFRAG flag i...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix xattr related buffer overflow... Willy Tarreau forwarded me a message from Disclosure with the following warning: The helper xattrkey uses the pointer variable in the loop condition rather than dereferencing it. As...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2len with offsetof in smb2calcmaxoutbuflen Following this commit e2b76ab8b5c9 “ksmbd: add support for read compound”, response buffer management was changed to use a dynamic iov array. In the new desig...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protection against send buffer overflow in NFSv2 READDIR. The previous limit on the @count argument has been restored to prevent buffer overflow attacks...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then increments wqe-processed; howeve...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iiobuff on the stack using aligned8, but no initializer is provided; however, there is a gap in the structure. This results in a data leak, a...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skbput When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtiovsockskbrxput. Unfortunately, virtiovsockskbrxput uses the length...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input whil...

Astra Linux – Vulnerability in Linux

A buffer overflow at the framebuffer layer in the fbcon code within the Linux kernel, prior to version 5.8.15, could be exploited by local attackers to read kernel memory, referred to as CID-6735b4632def...

Astra Linux – Vulnerability in libxml2

In libxml2 versions before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer do not check for integer overflows. This can lead to out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software that uses libxml2’s...

Astra Linux – vulnerability in bind9

In BIND versions 9.5.0 through 9.11.29, 9.12.0 through 9.16.13, as well as versions 9.11.3-S1 through 9.11.29-S1 and 9.16.8-S1 through 9.16.13-S1 from the BIND Supported Preview Edition, and release versions 9.17.0 through 9.17.1 from the BIND 9.17 development branch, BIND servers are vulnerable ...

Astra Linux – vulnerability in ncurses

An issue was found in ncurses via version 6.2-1. nccaptoinfo in captoinfo.c contains a heap-based buffer overflow...

Astra Linux – vulnerability in glibc

The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc up to version 2.34 copies its path argument from the stack without validating its length. This can lead to a buffer overflow, potentially resulting in a denial of service or, if an application ...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

An issue was discovered in the Linux kernel up to version 5.18.9. A type confusion bug in nftseteleminit leading to a buffer overflow could be exploited by a local attacker to escalate privileges; this is a separate vulnerability from CVE-2022-32250. The attacker can gain root access, but must...

Astra Linux - Vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: tls: ensure that the stream is aborted if headers are invalid Normally, we wait for the socket to buffer the entire record before processing it. However, if the socket has a very small buffer, we read the data sooner to prevent...

Astra Linux – vulnerability in gpac

A heap-based buffer overflow vulnerability exists in gpac version 2.3-DEV-rev588-g7edc40fee-master; it allows remote attackers to execute arbitrary code and cause a denial of service DoS via the gffwrite component in at utils/osfile.c...