Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Device property: Initialize the remaining fields of fwnodehandle in fwnodeinit. If a firmware node is allocated on the stack e.g., a temporary software node whose lifetime is controlled by us or on the heap—but using a non-zeroin...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fixed NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline. However, the BO remains in the client’s object list until userspace explicitly closes the GEM handle. If memory...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7996 – A possible NULL pointer dereferencing has been fixed in mt7996macwritetxwi80211. For injected frames e.g., via Radiotap, mac80211 can set info-control.vif = NULL, as explicitly stated in the struct...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed the handling of ACKALL packets. The rxrpcinputackall function accepts ACKALL packets without checking whether the call is in a state where outstanding transmit buffers exist. Therefore, a forged ACKALL packet can...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Invalid indirect BO handle is rejected during indirect CSD setup. The function v3dgetcpuindirectcsdparams looks up the indirect buffer object from a handle provided by the user space. However, it never checks the result....

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fixed the publication race in priv-channelstats. The mlx5echannelstatsalloc function publishes a new entry to priv-channelstats, and then increments priv-statsnch as a publication token. However, neither operation...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: A NULL pointer dereference occurred in xeptzapptesentry. The page-table walk framework might pass a NULL child pointer for unpopulated entries. The xeptzapptesentry function calls containerofchild before checking for...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: The issue of NULL bus dereference in ofpcirangeparserone has been fixed. The rework of the bus matching process resulted in ofmatchbus returning NULL for nodes that have ranges/dma-ranges but no local address-cells. parserinit...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tpmcrb: Add a check for ACPICOMPANION against NULL during the probe. Every platform driver can be forced to match a device that does not match its list of device IDs due to devicematchdriveroverride. Therefore, platform drivers...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: Proper handling of “hold” state in “isoconnready”. The dereferencing of “sk” in “isoconnready” must be done either under “conn-lock” or while holding the reference count, to avoid concurrent closure. Currently,...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: clk: Fixed clkhwgetclk when dev is NULL. Any registered clkcore structure may have a NULL pointer in its dev field. Although this has never been officially documented, this is evident from the widespread use of clkregister and...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Tracing: It was determined that processstring also allows arrays. To address a common bug where TRACEEVENT’s TPfastassign assigns the address of an allocated string to the ring buffer and then references it in TPPrintk, which can...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: pfcp: Allocate per-cpu tstats for PFCP netdevs PFCP uses devgettstats64 as its ndogetstats64 callback. However, pfcplinksetup does not request NETDEVPCPUSTATTSTATS. As a result, the net core leaves dev-tstats as NULL for PFC...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite the error code when finalizing the cache after an error. During the initialization of regcache, if an error occurs in the cacheops-populate callback, and if the cache operations include an exit callback...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: skmsg: Fixed the incorrect last sg check in skmsgrecvmsg. Also, one instance of a kernel NULL pointer dereferencing was fixed as follows: 224.462334 Call Trace: 224.462394 tcpbpfrecvmsg+0xd3/0x380 224.462441 ? sockhasperm+0x78/0x...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: usb: dwc3-meson-g12a: Fixed an issue where the USB2 PHY glue initialization was performed when PHY0 was disabled. When only PHY1 is used for example, on Odroid-HC4, the regmap initialization code uses USB2 ports without...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fixed a NULL pointer dereferencing in qcasetup, which occurred for non-serdev devices. For devices connected via non-serdev paths, hu-serdev is NULL. However, qcasetup serdevdevicegetdrvdatahu-serdev and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: btrfs: Skip global block reserve accounting for rescue mounts BUG Mounting with rescue=ibadroots after corrupting the block group tree triggers a NULL pointer dereference: - BUG: Kernel NULL pointer dereference, address:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: Use kfreercu for the off-channel link in mt76putvifPhyLink. The mt76putvifPhyLink function frees the off-channel mlink using the plain kfree function, after calling rcuassignpointerNULL. However, rcuassignpointer only...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...