356247 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image information block within the current erase block, then utilizes image information regioncount to iterate through entries stored in a fixed...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field will not be set; consequently, sofipc4routesetup will trigger a kernel Oops by attempting to...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers receive a struct device pointer and call devgetdrvdata to retrieve the driver data. However, the driver data is set only at the end of the probe, after...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate data length check immbuf-len is a user-controlled uint32t received from the network. Adding it to immdataoffset without overflow checking allows a malicious initiator to send...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in setposixaclentriesdacl on overflow Commit 299f962c0b02 “ksmbd: use checkaddoverflow to prevent u16 DACL size overflow” added checkaddoverflow guards that break out of the ACE-building loops in...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xxcldmalateinit creates mdctrl-gpddmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized ring...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: sh: push-switch: Reorder cleanup operations to avoid use-after-free bug The original code places flushwork before timershutdownsync in switchdrvremove. Although we use flushwork to stop the worker, it could be rescheduled in...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: restored DACL size on checkaddoverflow to prevent malformed ACLs checkaddoverflow unconditionally writes the truncated sum into d even when overflow occurs, as mandated by its contract in include/linux/overflow.h. The four...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvcfunctionbind and uvcfunctionunbind In the error path of uvcfunctionbind, we use usbepfreerequest which uses uvc-controlreq but does not set it to NULL afterwards. Thus, uvc-controlreq...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusive end pointer, but its only caller passes datalimit = ibptr + datalen, which points one past the last valid byte. The newline searc...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: reject unsupported target families xtnat SNAT and DNAT target handlers assume that an IP-family conntrack state exists and can dereference a NULL pointer when instantiated from an unsupported family via nftcompa...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path; thus, a...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ipvsnaticmp Sashiko warns that a local attacker can modify the packet while it is being processed by IPVS. Several functions read the IP ihl field multiple times, which can lead to out-of-bounds...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: do not leak bad clone into future transaction Upon a memory allocation failure, the cloned nftpipapomatch can enter a bad state: - Some fields may have their lookup tables resized while others did not. -...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM’s internal “service pending PV EOI” request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand function is supposed to wait until the write Urb becomes available or return an error; instead, it updates the transfer buffer and attempts to resen...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...
Astra Linux – vulnerability in linux-6.12, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors Both nfsdvfswrite and nfsdcommit call filemapcheckwberr to detect deferred writeback errors; however, neither rotates the server’s write verifier nn-writeverf when this chec...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum before hhfchange to avoid overflow hhfinit sets q-quantum = pschedmtuqdiscdevsch without any overflow check. A device with a very large MTU e.g., a dummy device where maxmtu == 0 yet accepting MTU...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ila: Reload IPv6 header after pskbmaypull in checksum adjust ilacsumadjusttransport caches ip6h = ipv6hdrskb before calling pskbmaypull. For a non-linear skb where the transport header resides within a page fragment, pskbmaypull...