Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmsmac – Fix for dmafreecoherent size dmaallocconsistent may change the size to align it. The new size is saved in aced. The free size is changed to match the allocation size...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: mac80211: Fixed an underflow in staticbranchdec for aqldisable. syzbot reported an underflow in staticbranchdec in aqlenablewrite. 0 The issue arises because aqlenablewrite does not serialize concurrent write operations ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: libertas: A use-after-free occurred in the lbsfreeadapter function. The lbsfreeadapter function uses timerdelete non-synchronous for both commandtimer and txlockuptimer before freeing the structure. This is incorrect becaus...

Astra Linux – Vulnerability in wpa

The implementation of PEAP in wpasupplicant through version 2.10 allows for authentication bypass. To successfully carry out this attack, wpasupplicant must be configured to not verify the network’s TLS certificate during Phase 1 authentication. Additionally, the eappepeapdecrypt vulnerability ca...

Astra Linux – Vulnerability in Linux-Firmware

Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Astra Linux – Vulnerability in wpa

In p2pcopyclientinfo of p2p.c, there is a potential out-of-bounds write vulnerability due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, without the need for additional execution privileges. User interaction is not...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtlwifi – significantly reduced the attempts to read efuse in case of failures. Syzkaller reported a hung task with ueventshow on the stack trace. That specific issue was addressed by another commit 0. However, even with th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211 – Prohibit deactivating all links. In the internal API, this triggers a WARN message, but that should remain as it is—we want to be aware of bugs that might cause this issue. We prevent the deactivation of all link...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7996: Fixed a possible token leak in the mt7996txprepareskb function. If the linkconf or linksta lookups fail in the mt7996txprepareskb routine, the mt7996 driver may leak a previously allocated transmission token...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: rtw88 – corrected the incorrect type of variable pcigetdatadirty in AER handlers. The rtw88 driver stores an IEEE80211hw pointer via pcisetdatadirty during probe time. However, functions like ioerrordetected and ioresume...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length The ieee80211mlecommonsize function uses the first octet of the common information length as the common information length for all known MLE types. However, the ieee80211mlesizeok...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: ath12k: Fixed a NULL dereference in changestalinks for unready links. ieee80211setactivelinks calls ieee80211linkusechannel for each newly added link, and emits a WARNONONCE if it fails. This call uses...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: Use kfreercu for the off-channel link in mt76putvifPhyLink. The mt76putvifPhyLink function frees the off-channel mlink using the plain kfree function, after calling rcuassignpointerNULL. However, rcuassignpointer only...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7996 – A possible NULL pointer dereferencing has been fixed in mt7996macwritetxwi80211. For injected frames e.g., via Radiotap, mac80211 can set info-control.vif = NULL, as explicitly stated in the struct...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath11k – The “clear initialized flag” for deinitialized srng lists In several cases, we observe kernel panics upon resuming operations due to ath11k kernel page faults. These incidents occur under the following circumstance...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: “wifi: mac80211: fix memory leak in ieee80211ifadd” This resolution involves committing change 13e5afd3d773c6fc6ca2b89027befaaaa1ea7293. The function ieee80211iffree is already called from freenetdevndev, because...

USN-8661-2: Linux kernel (Low Latency) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8661-2 linux-lowlatency vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8667-1: Linux kernel (KVM) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8667-1 linux-kvm vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...