Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel the hrtimer before clearing the slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending interrupt might have already started the hrtimer i2cimxslavetimeo...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dma-fence: Fixed the potential issue of dereferencing a null pointer in tracedmafinesignaled, tracedmafinewaitend, and tracedmafinedestroy. After the fence signalling is reset, a null fence-ops pointer may be dereferenced. We...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rtc: pl031: Fixed the issue of null pointer dereferencing in RTC features. When there is no interrupt line, the RTC alarm feature is disabled. The clearing of the alarm feature bit was performed before allocating the ldata-rtc...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fixed NULL pointer dereferencing in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. The fcpfindfcinterface function currently selects the first...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fixed a potential invalid pointer dereference in groupprocesstileroom. If heaps is of type ERRPTR, panthorheappoolput will dereference an invalid pointer. Ensure that it is set to NULL in such cases...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for schemeadddirs internal error The damonsysfsschemeadddirs function sets the triedregions directory after the stats directory is set up. When the setup of the triedregions directory fails, the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: Rejects option groups without values. The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and provides only a recognized option name, such as “cachemode”, will...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: rejecting a disable request when there is no active interface The handleuaudiostreamreq function resolves an interface index using infoidxfromifnum. This function returns -EINVAL if no interface matches the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skbclone in control TX The function t7xxportctrltx clones each skb fragment before passing it to the port transmit path. The cloning operation is used immediately to set cloned-len. Therefore, a failure in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftfib: A fib expression in the netdev egress hook is rejected. A fib expression in the netdev egress base chain dereferences nftinpkt on the transmit path, resulting in a NULL pointer dereference during evaluation...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed NULL pointer dereferencing in bpftaskfromvpid. bpftaskfromvpid looks up a task in the pid namespace of the current task, via findtaskbyvpid: c findtaskbyvpidvpid findtaskbypidnsvpid, taskactivepidnscurrent...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: vmalloc: The issue of NULL pointer dereferencing in isvmareahugepages has been fixed. findvmarea may return NULL if the given address does not correspond to a valid vmalloc area. Check the return value before dereferencing it to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwrwpcreate during the connect process. frwrwpcreate creates a singleton Memory Region used to encode padding for Write chunks whose payload length is not XDR-aligned. In case of failure, it returns a negative...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/sched: schdualpi2: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever dualpi2 drops packets during the peek operation, it calls qdisctreereducebacklog. A problem arises because it calls...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fhandle: Detached mounts are now rejected in capablewrtmount. The recent RCU fix moved the mount namespace capability check to capablewrtmount, so a non-NULL mntnamespace remains valid after the nscapable dereference. The helper...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: tracing/fprobe: Fixed a NULL pointer dereference in fprobefgraphentry. The fprobefgraphentry function sizes a shadow-stack reservation during one iteration of the per-ip fprobe list, and fills it during another iteration—both...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Cancel SSR work items during PCI shutdown A reboot may cause the kernel to crash if it overlaps with the WLAN firmware’s recovery process SSR. The crash occurs due to a NULL pointer dereference in the MHI teardown...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: AppArmor: Fixed a NULL pointer dereferencing in unpackpdb. pdb-dfa can become NULL if unpackdfa fails, resulting in a NULL pointer dereferencing...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Initialize reid before removing the registration. The rpcrdmacreateid function registers ep-rern with the rbclient, before returning the new rdmacmid to rpcrdmaepcreate. However, rpcrdmaepcreate currently stores that...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hciqca – Fixed a NULL pointer dereferencing in qcadmphdr, for devices that are not serdev devices. For devices connected via non-serdev paths, hu-serdev is NULL. However, qcadmphdr dereferences...