Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: afs: Fixed the delayed allocation of a cell’s anonymous key. The allocation of a cell’s anonymous key is performed in a background thread, along with other cell-related operations such as making DNS calls. In the reported bug, th...

The vulnerability of the afs_open_socket() function in the fs/afs/rxrpc.c module of the Andrew File System support module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the afsopensocket function in the fs/afs/rxrpc.c module of the Andrew File System support library in the Linux operating system is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the afs_wait_for_operation() function in the fs/afs/fs_operation.c module of the Andrew File System support module in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the afswaitforoperation function in the fs/afs/fsoperation.c module of the Andrew File System support module in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-26848

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-26848

CVE-2024-26848 affects the Linux kernel AFS file system; advisories (Ubuntu USN-6919-1 and Amazon Linux 2 ALAS2KERNEL-5.10-2024-076) describe an fix for an endless loop in directory parsing. Affected products/versions are kernel builds shipping the AFS code; remediation is to update the kernel to...