Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Assign the job pointer to NULL before signaling the fence In commit e4b5ccd392b9 “drm/v3d: Ensure the job pointer is set to NULL after the job completes”, we introduced a change to assign the job pointer to NULL after...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/imagination: fixed firmware memory leaks Released the memory used to store the results of firmware image processing when the module is unloaded. Fixed the issue where the same memory was still leaking if the processing of...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add a step to move a job to the pending list if the reset operation was skipped. When a CL/CSD job times out, we check whether the GPU has made any progress since the last timeout. If so, instead of resetting the hardwar...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevention of division by zero The user can set any speed value. If the speed is greater than UINTMAX/8, a division by zero is possible. Found by the Linux Verification Center linuxtesting.org with SVACE...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/imagination: avoided deadlock on fence release The processing of fence release in the scheduler queue is performed on a workqueue, rather than directly in the release function itself. Deadlock issues have been fixed, such ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix for the “use-after-free” bug. This bug can be triggered by sending a single amdgpugemuserptrioctl command to the AMDGPU DRM driver on any ASICs with an invalid address and size. The bug was reported by Joonkyo Jun...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/vkms: Fixed issues related to use after free and double-free operations during initialization. If the driver initialization fails, the vkmsexit function may access an uninitialized or freed defaultconfig pointer, potential...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevention of division by zero The user can set any speed value. If the speed is greater than UINTMAX/8, a division by zero is possible. Found by the Linux Verification Center linuxtesting.org with SVACE...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu: fix usage of slab after free +0.000021 BUG: KASAN: slab-use-after-free in drmschedentityflush+0x6cb/0x7a0 gpusched +0.000027 Reading of size 8 at address ffff8881b8605f88 by task amdpciunplug/2147 +0.000023 CPU: 6...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fixed handling of EFAULT errors. Currently, we treat EFAULT errors from hmmrangefault as non-fatal errors when called from xevmuserptrpin. This is done on the assumption that the user has merely performed a unmap...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: The denominator “cbrpipes” must not be 0; it is checked before being used. WHAT & HOW The denominator cannot be 0, and is checked before being used. This fix addresses two “DIVIDEBYZERO” issues reported by...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon if it is being destroyed. If the active performance monitor v3d-activeperfmon is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, causing the...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not treat wbconnector as a physical device in createvalidatestreamforsink. Do not attempt to operate on drmwbconnector as an amdgpudmconnector. While dereferencing connector-base may “work”, it is incorrect an...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/xe/tracing: Fixed a potential UAF Uninitialized Address Fault in TPPrintk. The commit afd2627f727b “tracing: Check “%s” for dereference via the field, not via the TPPrintk format” exposes potential UAFs in the xeboMove tra...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/xe/hmm: Do not dereference struct page pointers without holding the notifier lock. The pnfs that we obtain from hmmrangefault point to pages that we do not own. The guarantee that these pages are still in the CPU page tabl...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpudmhdcp.c copies pointers to amdgpudmconnector objects without incrementing the kref reference counts. When using a USB-C dock, and the dock is unplugged, the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/mediatek: Fixed a coverage issue related to unintentional integer overflows. 1. Instead of multiplying two variables of different types, change the approach to assigning a value to one variable and then multiplying the oth...

CLSA-2025-1749568993 kernel: Fix of 24 CVEs

vsock: Keep the binding until socket destruction CVE-2025-21756 - mt76: fix use-after-free by removing a non-RCU wcid pointer CVE-2022-49328 - bpf, testrun: Fix alignment problem in bpfprogtestrunskb CVE-2022-49840 - ASoC: core: Fix use-after-free in sndsocexit CVE-2022-49842 - net: sched: Fix...

CLSA-2025-1749562017 kernel: Fix of 24 CVEs

vsock: Keep the binding until socket destruction CVE-2025-21756 - mt76: fix use-after-free by removing a non-RCU wcid pointer CVE-2022-49328 - bpf, testrun: Fix alignment problem in bpfprogtestrunskb CVE-2022-49840 - ASoC: core: Fix use-after-free in sndsocexit CVE-2022-49842 - net: sched: Fix...

The vulnerability in the module drivers/gpu/drm/v3d/v3d_submit.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/gpu/drm/v3d/v3dsubmit.c kernel module of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...