Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xfrm: The defensive unhash of xfrmstate lists in xfrmstatedelete has been fixed. KASAN: A “slab-use-after-free” condition occurs in xfrmstatedelete’s hlistdelrcu calls under syzkaller load on Linux-6.12.y stable. This issue wa...

ROS-20260916-73-0071

The vulnerability of the xfrmstatedelete function in the net/xfrm/xfrmstate.c module, which is part of the Linux kernel’s networking functions, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2024-49953

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash caused by calling xfrmstatedelete twice The km.state is not checked in driver's delayed work. When xfrmstatecheckexpire is called, the state can be reset to XFRMSTATEEXPIRED, even if it is XFRMSTATEDEAD...

CVE-2024-49953: Operation on a Resource after Expiration or Release

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash caused by calling xfrmstatedelete twice The km.state is not checked in driver's delayed work. When xfrmstatecheckexpire is called, the state can be reset to XFRMSTATEEXPIRED, even if it is XFRMSTATEDEAD...