Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - misc: ibmasm: A flaw in ibmasmhandlemouseinterrupt caused an out-of-bounds MMIO read. ibmasmhandlemouseinterrupt performed an out-of-bounds MMIO read when the queue reader or writer index from hardware exceeded REMOTEQUEUESI...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: zsmalloc: Fixed races between asynchronous zspage free operations and page migration. The asynchronous zspage free worker attempts to lock the entire page list of a zspage without protecting against page migration. Since pages...

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/aio: Check IOCBAIORW before the conversion of struct aiokiocb. The first argument of kiocbset Cancelfn may point to a struct kiocb that is not embedded within struct aiokiocb. With the current code, depending on the compiler,...

Astra Linux – Vulnerability in libmodbus

A issue was discovered in libmodbus before versions 3.0.7 and 3.1.x, prior to 3.1.5. There is a buffer overflow vulnerability in the MODBUSFCWRITEMULTIPLECOILS case, also known as VD-1302...

Astra Linux – Vulnerability in Qemu

In QEMU, the softmmu/physmem.c file, versions up to 7.0.0, can perform an uninitialized read on the translatefail path, resulting in an ioreadx or iowritex crash. NOTE: A third-party report states that the “Non-virtualization Use Case” described in the qemu.org reference applies here. In other...

Astra Linux – Vulnerability in gnutls28

A flaw in GnuTLS’ DTLS handshake parsing allows for malformed fragments with zero length and non-zero offsets. This leads to an integer underflow during reassembly, resulting in an out-of-bounds read. This issue is remotely exploitable and could cause information disclosure or denial of service...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: can: softing: fwParse: This function validates the span of the firmware records. fwParse reads a fixed record header, a payload provided by the firmware, and a trailing checksum, without knowing the end of the firmware blob...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source RDP server. Versions up to 0.10.5 contain an out-of-bounds read vulnerability during the RDP capability exchange phase. The issue occurs when memory is accessed before validating the remaining buffer length. A remote, unauthenticated attacker can exploit this vulnerability ...

Astra Linux – Vulnerability in libstb

A issue was discovered in stbstbimage.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting them to RGBA format. This led to a buffer overflow when the result was re-interpreted as a 16-bit buffer. An attacker could potentially use stbimage to crash a service, o...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: sched: using the RCU read-side critical section in tapriodump Fixed a possible use-after-free in ‘tapriodump’ by adding the RCU read-side critical section. This issue was not encountered on x86, but was found on an arm64...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Staging: rtl8723bs: Fixed issues with WEP length underflow and OOB read during the OnAuth process. OnAuth contains two bugs in the shared-key authentication process. When the Privacy bit is set, rtwwepdecrypt is called without...

Astra Linux – Vulnerability in mbedtls

A issue was discovered in Arm Mbed TLS before version 2.24.0. The function mbedtlsx509crlparseder has a buffer over-read of one byte...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: parisc: Revised getuser to probe user read access rights. Due to the way read access support is implemented, read access interruptions are only triggered at privilege levels 2 and 3. The kernel executes at privilege level 0, so...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: hrtimers: Timers queued after CPUHPAPHRTIMERSDYING are forced to be migrated away from the dying CPU to any online target. This is done to avoid delaying bandwidth timer handling tasks related to CPU hotplug progress. However,...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in Squid

In versions 4.14 and 5.x through 5.0.5, in some configurations, the Squid vulnerability allows information disclosure due to an out-of-bounds read in the WCCP protocol data. This vulnerability can be exploited as part of a chain for remote code execution, as there is no one to stop such attacks...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath6kl – Fix for OOB read from the firmware’ nummsg field in the TX complete handler The firmware-controlled nummsg field u8, 0-255 affects the loop in ath6klwmitxcompleteeventrx, without any validation against the buffer...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: A out-of-bounds read occurred in the errout section of fbcondosetfont. When fbcondosetfont fails e.g., due to a memory allocation failure within vcresize under heavy memory pressure, it jumps to the errout label to...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: net: bridge: Fixed the issue of null pointer dereference in the vlan tunnel destination. This patch addresses a null pointer dereference issue caused by lockless access in the tunnel egress path. When deleting a vlan tunnel, the...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free remote desktop protocol library and client. In affected versions, there is an out-of-bound read in the ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP-based client into reading out-of-bound data and attempting to decode it, potentially leading to a cras...