Astra Linux – Vulnerability in golang-golang-x-net, golang-1.15

In Go, before versions 1.15.12 and 1.16.x, and before version 1.16.4, net/http allowed remote attackers to cause a denial of service panic through a large header sent to ReadRequest or ReadResponse. This issue can affect the Server, Transport, and Client components in certain configurations...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/smc: Fixed a use-after-free in smcrxpipebufrelease. The smcrxsplice function passes RMB pages to a pipe and takes a socket reference per entry. As a result, the smcsock remains alive until the reader finishes. The connecti...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/smc: Fixed a socket reference count leak in smcswitchconns. The smcswitchconns function takes a reference to the SMC socket before releasing the lgr-connslock; as a result, the connection remains active while the CDC slot ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: openvswitch: fixed the use of flow mask after it was freed upon flow deletion. The commit in the “Fixes” section schedules the freeing of flow-mask via RCU right after it is removed from the flow table. The pointer remain...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfq: Fix for integer overflow of “credit”. If schfq is configured with “initial quantum” values greater than INTMAX, the first assignment of “credit” will cause signed integer overflow, resulting in a very negative...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruption The buggy peer implementation can send corrupted DSS options, resulting in several warnings along the data path. Utilize DEBUGNET assertions to prevent crashes on certain builds and ensur...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: honor table dormant flag from netdev release event path Check for table dormant flag otherwise netdev release event path tries to unregister an already unregistered hook. 524854.857999 ------------ cut here...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: hsr: The operation of freeing the node table is deferred until after the RCU readers are called. Generic-netlink operations for hsrnodelist and hsrnodestatus are executed under rcureadlock. These operations iterate through...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In the net module, the guard timestamp cmsgs to real error queue skbs mechanism was addressed. The skbiserrqueue function treats PACKETOUTGOING as the only marker for an skb in the skerrorqueue. However, this assumption does not...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, within kcm: It is necessary to hold the RCU read lock while running the BPF parser. The function kcmparsefuncstrparser calls bpfprogrunpinoncpu, which prevents CPU migration. However, this call does not crea...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets do not overflow the gsosegs field. The user can specify any value less than TCPMINGSOSIZE = 8 for the gsosize parameter in a packet sent using a AFPACKETPACKETVNETHDR socket. At the same time,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: extend minimum interval restriction to entire cycle too It is possible for syzbot to bypass the restriction imposed by the problematic commit in the “Fixes” tag, because the taprio UAPI allows a cycle time that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Socket creation is restricted to the initial network namespace. The QRTR protocol maintains its entire port and node state in global variables within the module, without being partitioned per network namespace...

Astra Linux – Vulnerability in golang-golang-x-net, golang-1.19

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, enough to trigger a denial of service due to a small number of small requests...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tipc: Fixed a use-after-free in tipcconnclose. syzbot reported a null-ptr-deref in tipcconnclose during netns dismantling. 0 tipctopsrvstop iterates through tipcnetnet-topsrv-connidr and calls tipcconnclose for each tipcconn...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9clientrpc on fatal signal When p9clientrpc is called with type P9TFLUSH and the transport has no peer e.g., fd transport backed by pipes without a 9p server, a fatal signal causes an infinite loop:...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to a UAF on...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsatreesetup, it means that we are the last switch of the tree which is successfully probing, and we should be setting up all switches from our probe path. After...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rapidio: A check for rioaddnet has been added in rioscanallocnet. The return value of rioaddnet should be checked. If it fails, putdevice should be called to free the memory and release the references initialized during rioaddnet...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: mana: Added NULL guards in the teardown process to prevent panics during attach failures. When queue allocation fails halfway through, error cleanup releases variables apc-txqp and apc-rxqs containing NULL values. Multipl...