Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Block: Fix for UAF when flushing the rq while iterating tags. The function blkmqclearFlushrqMapping is not called during SCIS probe. This issue is addressed by checking blkqueueinitdone. However, the QUEUEFLAGINITDONE flag is...

Astra Linux – Vulnerability in Thunderbird, Firefox

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox 137, Firefox ESR 115.22, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: A bug related to use after free was fixed due to errors in error path handling in mtkjpegdecdevicerun. In mtkjpegprobe, the variable &jpeg-jobtimeoutwork is bound to mtkjpegjobtimeoutwork. In mtkjpegdecdevicerun,...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

It was discovered that an NFT object or expression could reference a NFT set located in a different NFT table, resulting in a use-after-free once that table was deleted...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: Fixed an issue involving a use-after-free in hcisendacl. This fix addresses the issue caused by receiving HCIEVDISCONNPHYLINKCOMPLETE, which does not call hciconndel without first checking whether conn-type is...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: sched: Fixed the use of “skb” after it is passed to qdiscenqueue. We cannot use “skb” again after passing it to qdiscenqueue. This is essentially identical to commit 2f09707d0c97 “schsfb: Also store skblen before calling chi...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

The “Use After Free” vulnerability in the Linux kernel’s traffic control index filter tcindex allows for privilege escalation. The imperfect hash area can be updated while packets are being processed, leading to a use-after-free when the ‘tcfextsexec’ function is called with a corrupted tcfext. A...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

There is a use-after-free vulnerability in the Linux Kernel that can be exploited to achieve local privilege escalation. To exploit this vulnerability, the CONFIGTLS or CONFIGXFRMESPINTCP kernel configuration flags must be set; however, the operation does not require any special privileges. There...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drbd: Use of “free” after calling drbdcreatedevice The drbdDestroyConnection function frees the “connection” object. Therefore, it is necessary to use the safe iterator to prevent a use-after-free situation...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fixed a potential Use-after-Allocation error in cifssignalcifsdforreconnect. Skipped sessions that are being terminated status == SESEXITING to avoid UAF Use-after-Allocation errors...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM – Flushing pages under kvm-lock to fix a Use-After-Free error in svmregisterencregion It is necessary to flush the cached pages in svmregisterencregion before releasing kvm-lock to address use-after-free issues. In such...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Ensure that rdmaaddrcancel is executed before issuing more requests. The FSM can enter a loop, allowing rdmaresolveip to be called twice with the same idpriv. Although this cannot occur without going through the process...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: net/tls: The issue of “use-after-free” after the TLS device goes down and up has been fixed. When a netdev with active TLS offloading goes down, the tlsdevicedown function is called to stop the offloading and tear down the TLS...

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fixed the potential issue of using “glock” after a file system unmount. When a DLM lockspace is released and there are still locks in that lockspace, the DLM will automatically unlock those locks. Commit fb6791d100d1b...

Astra Linux – Vulnerability in Firefox, Thunderbird

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed a use-after-free of fp-owner.name in the durable handle owner check. Two concurrent SMB2 durable reconnections DH2C/DHnC on the same persistentid race the compare-read of fp-owner.name in ksmbdvfscomparedurableown...

Astra Linux – Vulnerability in Firefox and Thunderbird

Use-after-free in the DOM: Core & HTML components. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed a use-after-free race condition in the VM acquire operation. Replaced the non-atomic assignment of vm-processinfo with cmpxchg, to prevent race conditions when parent/child processes sharing a drmfile both attem...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmppdma: A race condition in mmppdmaresidue was fixed. Proper locking mechanisms were added in mmppdmaresidue to prevent a use-after-free when accessing the descriptor list and its contents. The race condition occurs...

Astra Linux – Vulnerability in Firefox and Thunderbird

Sandbox escape due to a use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...