Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: pinctrl: cirrus: cs42l43: Fixed double-put in cs42l43pinprobe devmaddactionorreset already invokes the action in case of failure; therefore, the explicit put causes a double-put...

The vulnerability of the cs_dsp_mock_bin_bin_add_name_or_info() function in the drivers/firmware/cirrus/test/cs_dspMockBin.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the csdspmockbinbinaddnameorinfo function in the drivers/firmware/cirrus/test/csdspMockBin.c module of the Linux kernel is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xorg-x11-drv-cirrus-1.5.2 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

qemu: cirrus: insufficient blit region checks

It was found that the Cirrus blit region checks were insufficient. A privileged guest user could use this flaw to write outside of VRAM-allocated buffer boundaries in the host's QEMU process address space with attacker-provided data...