356247 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: free APVLAN bcbuf SKBs outside IRQ lock ieee80211dostop removes APVLAN packets from the parent AP ps-bcbuf while holding ps-bcbuf.lock with IRQs disabled. It then calls ieee80211freetxskb before dropping the lock...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience When the first block is locked or the first few blocks, if the user wants to fully unlock the device, there are two possible outcomes: - Either they request to unlock the entire...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: run gadget disconnect from sleepable suspend context dwc3gadgetsuspend takes dwc-lock with IRQs disabled and then calls dwc3disconnectgadget. For async callbacks, the helper only uses plain spinunlock/spinlock, so the...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: fix potential memory leak in nvidiafbprobe In nvidiafbprobe, the memory allocated for modelist in nvidiasetfbinfo is not freed in subsequent error paths. This issue is fixed by calling fbdestroymodelist...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6: fix NULL deref in fib6walkcontinue on multi-batch dump inet6dumpfib saves its progress in cb-args1 as a positional index within the current hash chain. Between batches, a concurrent fib6newtable can insert a new table...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path Memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some discoverarenas error paths. This leads to memory leaks when arena...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereference Fix a possible NULL pointer dereference dmverityloadpinisbdevtrusted if the device has no table...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read another function’s LMTLINE physical base address and copy it into th...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: do not add sk to the parent socket’s accept queue unless BTLISTEN is set. The new sk should not be added to the parent socket’s accept queue after last l2capsockcleanuplisten has been executed in...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU iterator to dump route exceptions rt6nhdumpexceptions uses hlistforeachentry to iterate over RCU-protected exception lists. The caller holds rcureadlock, but does not hold rt6exceptionlock, so rt6insertexception can...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdpframe The size of xdpredirectarr array is ENETCMAXSKBFRAGS. However, the number of fragments contained in xdpframe may be greater than or equal to ENETCMAXSKBFRAGS, which will cau...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams bounds before overflow The data-streams overflow check is performed after the buffer overflow has already occurred. Move the overflow check to occur before the write operation. As a side note, issuing...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ftrace: Add a global mutex to serialize access to traceparser In ftrace, the traceparser structure is allocated and initialized when a trace file is opened; it is then used by both write and release handlers to parse user input...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devmrequestirq The driver calls devmrequestirq before initializing the completion used by the interrupt handler. Since the interrupt may occur immediately after...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first operation of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfsdqgetnextid xfsdqgetnextid takes the quota inode ILOCK before calling xfsireadextents. If xfsireadextents fails, the function returns immediately without releasing the lock, resulting in a leak ...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that underflow length CAKE accepts signed overhead values and stores them in an s16, but the adjusted packet length calculation uses unsigned arithmetic. A negative effective length can...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskbnetworkmaypull for transmitting network layer headers In vxlanxmit, arpreduce, and vxlanmdbentryskbget, pskbmaypull was being called to verify the availability of network layer headers ARP, IPv6/ND, IP/IPv6 MDB key...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems, the configuration space is too large to be ioremaped all at once; thus, pciecamcreate maps each bus segment separately and relies on the...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it remains enabled until the devm cleanup runs after remove returns. remove cancels bq-iilimitsetupwork while the threaded handler ca...