Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: It was discovered that nfqueue holds the bridgeskb-dev variable while the packet is being queued. The function brpassFrameup reassigns skb-dev from the ingress port to the bridge master before queuing bridge...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipvs: Do not propagate the “one-packet” flag to synced connections. Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies the connection flags from the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detaching event groups during removeonexec The perfeventremoveonexec function removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed path resolution in ksmbdvfskernpathcreate. The SMB2 open lookup is rooted at the share using LOOKUPBENEATH, but the create/mkdir/hardlink logic does not use this approach. ksmbdvfskernpathcreate generates an...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipc: limits the allocation of the next ID to the valid ID range. The checkpoint/restore sysctl path can request the next SysV IPC ID through ids-nextid. Currently, ipcidralloc forwards that request to idralloc with an open-ended...

Astra Linux – Vulnerability in Chromium

Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of uninitialized variables in Skia in Google Chrome prior to version 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 153.0.8010.36, reading data from out of bounds locations in Google Chrome allowed a remote attacker to read memory outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: A signed comparison in iopollgetownership was fixed. iopollgetownership uses a signed comparison to check whether pollrefs has reached the threshold for the slowpath: c if unlikelyatomicread&req-pollrefs =...

Astra Linux – Vulnerability in Chromium

Before version 150.0.7871.186, using Codecs in Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: xfrm: natkeepalive: avoid double-free on send error The natkeepalivesend function frees the keepalive packet whenever the IPv4 or IPv6 send helper reports an error. This cleanup is only necessary before the packet is passed to th...

Copy-Fail

CVE-2026-31431 "Copy Fail" - Local Privilege Escalation Python 3.7+ compatible version including Astra Linux Safe check without exploitation: root@kitploit: curl -s https://raw.githubusercontent.com/p401a-ops/Copy-Fail/refs/heads/main/detect.py | python3 Exploitation when prompted, you will need ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: In OpenVSwitch, the defertunnelnetdevput function is delayed until the RCU callback is executed. The ovsnetdevtunnelDestroy function may be executed after NETDEVUNREGISTER has already detached the device. Dropping the reference t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: SCTP: Stream: Fully roll back denied add-stream states When the request to add a stream ADDOUTSTREAMS is denied, SCTP only reduces the size of the queued chunks and lowers the outcnt value. This leaves the removed stream’s metada...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ppp: Deferring the freeing of channels to an RCU callback via callrcu ensures that any ongoing pppol2tprecv operations are protected during the grace period. This prevents unexpected dereferencing of channels that were just...

Astra Linux – Vulnerability in Firefox

An attacker who could have convinced a user to drag and drop an image into a file system could have manipulated the resulting filename to include an executable extension. By doing so, the attacker could potentially trick the user into executing malicious code. Although very similar, this is a...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in image handling in iOS in Google Chrome on iOS prior to version 92.0.4515.107 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Astra Linux – Vulnerability in node-semver

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...

Astra Linux – Vulnerability in Firefox and Thunderbird

If a user opens a specially crafted PDF file, the PDF reader may be tricked into leaking cross-origin information, when such information is served as chunked data. This vulnerability affects Firefox versions earlier than 85, Thunderbird versions earlier than 78.7, and Firefox ESR versions earlier...

Astra Linux – Vulnerability in WebKit2GTK

A correctness issue in JIT was addressed through improved checks. This issue has been fixed in tvOS 16.1, iOS 15.7.1, iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1, and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app...