Astra Linux – Vulnerability in Firefox, Thunderbird

An attacker could exploit XSLT error handling mechanisms to associate content controlled by the attacker with another origin that is displayed in the address bar. This could be used to trick users into submitting data intended for the spoofed origin. This vulnerability affects Thunderbird 102.2,...

Astra Linux – Vulnerability in dcmtk

A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service DoS attack through a malicious DCM file...

Astra Linux – Vulnerability in Chromium

Improper input validation in FedCM’s Google Chrome version prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Added a check for cstate. Since kzalloc may fail and return a NULL pointer, it would be better to check the cstate to avoid dereferencing the NULL pointer in drmatomichelpercrtcreset. Patchwork:...

Astra Linux – Vulnerability in Mariadb 10.3

MariaDB version 10.5.9 allows a SetVar.cc application to crash due to certain uses of the UPDATE statement in conjunction with a nested subquery...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: It is required that the minimum ACE size is respected in smbcheckpermdacl. Both ACE-walking loops in smbcheckpermdacl only protect against a remaining buffer being undersized, not against an ACE whose declared ace-size ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double-free in probe error path The usbinitializegadget function installs gadgetrelease as the release callback for the embedded gadget device. Therefore, the struct net2280 instance is released through...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remoteproc starts in parallel with the NGD driver being probed, or the remoteproc is already up when the PDR lookup is being registered, or in the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Avoid double-freeing of pool-stack during AQ initialization failures. The otx2poolaqinit function frees pool-stack when mailbox synchronization or retry allocation fails, but leaves the pointer unchanged. Later,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: Fixed a memory leak in the error path of hciallocdev. Early failures in Bluetooth HCI UART configuration lead to a leak of percpu memory through the SRCU struct initialized early in hciallocdev. When device...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipv4: net-ipv4.sysctllocalreservedports is freed too soon after unregisternetsysctltable. The function ipv4sysctlexitnet currently frees net-ipv4.sysctllocalreservedports too quickly. Only after unregisternetsysctltable can we be...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the tunxdpone function, when buildskb fails, the function sets ret to -ENOMEM and jumps to the out label. This causes the function to return without freeing the page that was allocated by vhostnetbuildxdp for the frame. Simila...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: arm64: Set UXN on swapper page tables This issue was accidentally fixed upstream via c3cee924bd85 "arm64: head: cover the entire kernel image in the initial ID map", as part of a major refactoring of the arm64 boot flow. This...

Astra Linux – Vulnerability in cjson

It has been discovered that cJSON v1.7.16 contains a segmentation violation due to the use of the cJSONSetValuestring function in the cJSON.c file...

Astra Linux – Vulnerability in Corosync

Corosync versions up to 3.1.9 suffer from a stack-based buffer overflow in the orftokenendianconvert function, in the exec/totemsrp.c file. This vulnerability exists when encryption is disabled or if the attacker knows the encryption key. The issue is caused by a large UDP packet...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nflog: The validation of the MAC header was performed before dumping it. The fallback path of dumpmacheader only guards access to the MAC header when skb-macheader != skb-networkheader, without checking...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nbd: defer config put in recvwork There is one UAF issue in recvwork when running NBDCLEARSOCK and NBDCMDRECONFIGURE: - nbdgenlconnect // confref=2 connect and recvwork A - nbdopen // confref=3 - recvwork A completed //...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: validate interrupt packet headers The cypressreadintcallback function parses the interrupt-in buffer according to the selected Cypress packet format. Format 1 includes a two-byte status/count header, and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schsfb: Replace the direct dequeue call with peek and qdiscdequeuepeeked. When sfb has children e.g., qfq qdisc whose peek callback is qdiscpeekdequeued, we could encounter a kernel panic. When the parent of such qdisc...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ALSA: PCM: Fixed corruption of the wait queue list in sndpcmdrain for linked streams. sndpcmdrain uses initwaitqueueentry, which does not clear the prev/next entries of the queue. Additionally, it uses addwaitqueue, where a...