Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rapidio: A check for rioaddnet has been added in rioscanallocnet. The return value of rioaddnet should be checked. If it fails, putdevice should be called to free the memory and release the references initialized during rioaddnet...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: NFSD: Hold a reference to the net structure for the lifetime of the open file descriptor. The /proc/fs/nfs/exports proc entry is created during module initialization and remains valid throughout the lifetime of the module. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: strparser: Fixed a memory leak in strpabortstrp. When the stream parser is aborted, for example after a message assembly timeout, it may still retain a reference to the partially assembled message in strp-skbhead. This...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skbmaytxtimestamp skbmaytxtimestamp may acquire sock::skcallbacklock. The lock must not be taken in IRQ context; only softirq is acceptable. Some drivers receive the timestamp via a dedicated interrupt and u...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that underflow length CAKE accepts signed overhead values and stores them in an s16, but the adjusted packet length calculation uses unsigned arithmetic. A negative effective length can...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum number of lookups Current code does not perform any bounds checking on the number of lookups a client can perform. Although the code restricts lookups to local clients, there remains a risk that a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/iucv: Filtering frames in afiucvhsrcv, based on the ingress device afiucvhsrcv selects a socket from iucvsklist by matching four 8-byte name fields in the transport header alone. No check is made to determine which netdevi...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 “net-gro: Fix GRO flush when receiving a GSO packet.” added a flush check to skbgroreceive, but skbgroreceivelist lacks the same validation. As a result,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: use skbheaderpointercareful skbheaderpointer does not fully validate negative @offset values. Use skbheaderpointercareful instead. GangMin Kim provided a report and a reproducible example of the issue in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, the annotations for data-races around sk-skdataready,writespace have been updated. skmsg and possibly other layers are updating these pointers, while other CPUs may be reading them concurrently. Correspondin...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211: The ID of the bound element is read when checking non-inheritance. The cfg80211iselementinherited function reads the first data octet of the candidate element id = elem-data0 in order to look it up in an extension...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: Atlantic: RX pages that are consumed but not refilled from buffers. The aqringrxdeinit function only iterates over the range swhead, swtail, which is posted to the hardware. Since the page reuse strategy was introduced, a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - net: slip: Serialize the receive process during buffer reallocation. slreallocbufs replaces rbuff and updates the buffer size while holding sl-lock. slreceivebuf reads these fields and writes data through rbuff without holdi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: psample: Fixed an information leak in PSAMPLEATTRDATA. The psample open code uses nlaput to presumably avoid wiping the data with zeros, and instead overwrites it with packet data. This open coding does not clear the padding...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: rejecting overly deep qdisc hierarchies. Deep qdisc hierarchies can lead to excessive recursion in the qdisc tree walkers, potentially exhausting the kernel stack. The existing loop checks do not cover the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fixed a situation where a socket reference was dropped after the link group termination process. The smclgrterminate function drops the connslock after finding a connection in lgr-connsall, but before taking a reference ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fixed the locking mechanism in .getsockopt. The functions iucvsocksetsockopt and iucvsocksetsobrowsable were mirrored, and the entire switch statement was wrapped within locksock/releasesock. The existing lock that only...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/tls: tlsswspliceread fails after an async decrypt failure. When an async decrypt fails, tlsdecryptdone records the error in ctx-asyncwait.err and calls tlserrabort, which stores the error in skerr. Both tlsswrecvmsg and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: Rounding up the PTP per-out pin duration The pinduration is converted from the period provided by the user to SJA1105 clock ticks. This value is then passed as the cycletime parameter to futurebasetime. Very...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Reallocate the update replies for mismatched IDs. The ovsflowcmdnew function preallocates the optional reply skb before acquiring the ovsmutex, and before determining which existing flow will be updated. This is...