Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Media: dvb-net: fixed OOB access in ULE extension header tables The ulemandatoryexthandlers and uleoptionalexthandlers tables in handleoneuleextension are declared with 255 elements valid indices 0-254. However, the htype index i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTER are run concurrently, a race condition may occur, potentially leading to errors. Let’s illustrate this with an example where CPU0...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in netifnapidellocked on disconnect Remove the redundant netifnapidel call from the disconnect path. A WARN may be triggered in netifnapidellocked during USB device disconnection: WARNING: CPU: 0 PID: ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/tipc: fixed the slab-use-after-free issue in tipcaeadencryptdone+0x4bd/0x510 net/tipc/crypto.c:840. Syzbot reported a slab-use-after-free with the following call trace:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netsched: qfq: A double addition of a classifier was corrected in the class, where netem is a child qdisc. As described in Gerrard’s report 1, there are use cases where a netem child qdisc can make the parent qdisc’s enqueue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rapidio: A check for rioaddnet has been added in rioscanallocnet. The return value of rioaddnet should be checked. If it fails, putdevice should be called to free the memory and release the references initialized during rioaddnet...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: NFSD: Hold a reference to the net structure for the lifetime of the open file descriptor. The /proc/fs/nfs/exports proc entry is created during module initialization and remains valid throughout the lifetime of the module. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: strparser: Fixed a memory leak in strpabortstrp. When the stream parser is aborted, for example after a message assembly timeout, it may still retain a reference to the partially assembled message in strp-skbhead. This...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skbmaytxtimestamp skbmaytxtimestamp may acquire sock::skcallbacklock. The lock must not be taken in IRQ context; only softirq is acceptable. Some drivers receive the timestamp via a dedicated interrupt and u...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that underflow length CAKE accepts signed overhead values and stores them in an s16, but the adjusted packet length calculation uses unsigned arithmetic. A negative effective length can...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum number of lookups Current code does not perform any bounds checking on the number of lookups a client can perform. Although the code restricts lookups to local clients, there remains a risk that a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/iucv: Filtering frames in afiucvhsrcv, based on the ingress device afiucvhsrcv selects a socket from iucvsklist by matching four 8-byte name fields in the transport header alone. No check is made to determine which netdevi...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 “net-gro: Fix GRO flush when receiving a GSO packet.” added a flush check to skbgroreceive, but skbgroreceivelist lacks the same validation. As a result,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: use skbheaderpointercareful skbheaderpointer does not fully validate negative @offset values. Use skbheaderpointercareful instead. GangMin Kim provided a report and a reproducible example of the issue in...

Astra Linux – Vulnerability in net-snmp

Net-SNMP is an SNMP application library, tools, and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet sent to the net-SNMP snmptrapd daemon could cause a buffer overflow, resulting in the daemon crashing. This issue has been fixed in versions 5.9.5 and 5.10.pre2...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, the annotations for data-races around sk-skdataready,writespace have been updated. skmsg and possibly other layers are updating these pointers, while other CPUs may be reading them concurrently. Correspondin...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211: The ID of the bound element is read when checking non-inheritance. The cfg80211iselementinherited function reads the first data octet of the candidate element id = elem-data0 in order to look it up in an extension...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: Atlantic: RX pages that are consumed but not refilled from buffers. The aqringrxdeinit function only iterates over the range swhead, swtail, which is posted to the hardware. Since the page reuse strategy was introduced, a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - net: slip: Serialize the receive process during buffer reallocation. slreallocbufs replaces rbuff and updates the buffer size while holding sl-lock. slreceivebuf reads these fields and writes data through rbuff without holdi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: psample: Fixed an information leak in PSAMPLEATTRDATA. The psample open code uses nlaput to presumably avoid wiping the data with zeros, and instead overwrites it with packet data. This open coding does not clear the padding...