Astra Linux – vulnerability in linux, linux-5.10, linux-5.15

A race condition was found in the Linux kernel’s sound/hda device driver within the sndhdacregmapsync function. This may lead to a null pointer dereference issue, potentially resulting in a kernel panic or denial of service. PwrCmdWrite...

Astra Linux – vulnerability in qemu

A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs when processing read/write ioport commands if the selected floppy drive is not initialized as a block device. This flaw enables a privileged guest user to crash the QEMU process on the host, leading t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: A bug caused by NULL pointer dereferencing in brcmidmacsglistrw has been fixed. This patch addresses a bug where a NULL pointer dereferencing occurs when a high value of sdsgentryalign is used e.g., 512, and many...

Astra Linux – vulnerability in binutils

There is a flaw in binutils /bfd/pef.c. An attacker capable of submitting a specially crafted input file for processing by the objdump program could trigger a null pointer dereference. The primary risk posed by this flaw is application availability. It affects binutils versions prior to 2.34...

Astra Linux – vulnerability in Redis

Redis is an in-memory database that persists data to disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script could cause a NULL pointer dereference, resulting in a crash of the redis-server process. This issue has been resolved in Redis versions 7.0....

Astra Linux – Vulnerability in SQLite3

The flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN where the right-hand side is a view. This can lead to a NULL pointer dereference or incorrect results...

Astra Linux - vulnerability in linux

An issue was found in the Linux kernel up to version 5.9.1, which is used with Xen versions up to 4.14.x. In drivers/xen/events/eventsbase.c, it is possible to remove event channels during the event-handling loop a race condition. This can lead to use-after-free or NULL pointer dereferencing, as...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix potential NULL pointer dereference If sdprobe encounters an error early on before sdkp-device is initialized, sdzbcreleasedisk is called. This leads to a NULL pointer dereference when sdiszoned is invoked within tha...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/siw: Fixed a potential NULL pointer dereference during header processing. If siwgethdr returns -EINVAL before setrxfpducontext, qp-rxfpdu can be NULL. The error path in siwtcprxdata dereferences qp-rxfpdu-moreddpsegs...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In hci, fix for null-ptr-deref in hcireadsupportedcodecs. Fix hcicmdsyncsk to return not NULL for unknown opcodes. hcicmdsyncsk returns NULL if a command returns a status event. However, it also returns NULL where a...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix NULL pointer dereference in epqueue When the gadget endpoint is disabled or not yet configured, the ep-desc pointer can be NULL. This can lead to a NULL pointer dereference when cdns3gadgetepqueue is calle...

Astra Linux – Vulnerability in aom

It was discovered that AOM v2.0.1 contains a NULL pointer dereferencing issue through the ratehist.c component...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ipmi: Fixed a NULL pointer dereferencing after a failed registration. The trysmiinit function allocates newsmi-sism and subsequently calls ipmiregistersmimod, which corresponds to ipmiaddsmi. During ipmiaddsmi, the upper IPMI...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: Fix potential null-ptr-deref in sparxstatsinit and sparx5start sparxstatsinit calls createsinglethreadworkqueue and does not check the ret value, which may return NULL. A null-ptr-deref may occur:...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: use the correct logic to get mma8452data The original logic for getting mma8452data is incorrect; the dev pointer points to a device belonging to iiodev. We cannot use this dev to determine the correct...

Astra Linux – vulnerability in netcdf

An issue was found in libezxml.a within ezXML 0.8.6. The ezxmlinternaldtd function, when parsing a specially crafted XML file, performs improper memory handling. This results in a NULL pointer dereference when strcmp is executed on a NULL pointer...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: vcscreen: fix null-ptr-deref in vcsnotifier during concurrent vcswrite A KASAN null-ptr-deref was observed in vcsnotifier: BUG: KASAN: null-ptr-deref in vcsnotifier+0x98/0x130 Read of size 2 at addr qmpcmdname: qmpcapabilities,...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: nbd: call genlunregisterfamily first in nbdcleanup Otherwise, there may be a race condition between module removal and the handling of netlink commands, which can lead to the oops as shown below: BUG: kernel NULL pointer...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: drop TXRXNOTIFY on non-MMIO buses PKTTYPETXRXNOTIFY is an MMIO-only event; however, mt7615rxcheck and mt7615queuerxskb dispatch it to mt7615mactxfree on every bus. mt7615mactxfree cleans the DMA TX queues usin...

Astra Linux – vulnerability in linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset the binding mark of a reused connection Steve French reported a null pointer dereference error from the sha256 library. cifs.ko can send session setup requests on reused connections. If a reused connection is used fo...