8770 matches found
MAL-2025-6761 Malicious code in slack-astra-app (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Astra Linux – Vulnerability in easy-rsa
The weak encryption algorithm in the Easy-RSA version 3.0.5 to 3.1.7 allows a local attacker to more easily brute-force the private CA key when it is created using OpenSSL 3...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed a deadlock between rcutaskstrace and eventmutex. Fixed the following deadlock: - CPU A: - freeevent - perfkprobedestroy - mutexlock&eventmutex - perfTraceEventUnreg - synchronizercutaskstrace There are several paths...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: A error check in npcmvideoeceinit has been fixed. When the functionoffinddevicebynode fails, it returns NULL instead of an error code. Therefore, the corresponding error check logic should be modified to check...
Astra Linux – Vulnerability in openimageio
It was discovered that OpenImageIO v3.1.0.0dev contains a segmentation violation through the component /OpenImageIO/stringview.h...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: gpiolib: A crash occurred due to an error in gpiochipgetngpios. The gpiochipgetngpios function uses the chip macros to print messages. However, these macros rely on gpiodev being initialized and set up correctly. This is not the...
Astra Linux – Vulnerability in openimageio
It was discovered that OpenImageIO v3.1.0.0dev contains a heap overflow vulnerability through the component /OpenImageIO/fmath.h...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat
In libexpat version 2.6.1, an XML Entity Expansion attack is possible when external parsers are used in isolation created using XMLExternalEntityParserCreate...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: crypto: tegra – Do not transfer requests when tegrainit fails The tegracmacinit or tegrashainit functions may return an error when memory is exhausted. In such cases, requests should not be transferred when an error occurs...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/xe: The local fence was used in the error path of xemigrateclear. The purpose of the error path in xemigrateclear is to wait for the locally generated fence before returning. The code is waiting for m-fence, which could be th...
Astra Linux – Vulnerability in libcap2
The PAM module pamcap.so in the libcap configuration suite allows for group names that start with “@”. However, during actual parsing, configurations that do not start with “@” are incorrectly recognized as group names. This can result in unintended users being granted a set of inherited...
Astra Linux – Vulnerability in python-h11
h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a lack of strict parsing of line terminators in chunked-coded message bodies in h11 could lead to request smuggling vulnerabilities under certain conditions. This issue has been fixed in version 0.16.0. Since exploiting this...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: wifi: rtw89: Fixed a race condition between cancelhwscan and hwscancompletion. The rtwdev-scanning flag was not originally protected by a mutex. As a result, cancelHWSCAN could pass the condition, but suddenly hwscancompletion...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: Firmware: qcom: uefisecapp: fixed the race condition in efivars registration. Since the transition to using the TZ allocator, the efivars service is registered before the memory pool has been allocated. This can lead to a NULL...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: mm: abort vmamodify on merge out of memory failure The remainder of vmamodify relies on the vmg state remaining pristine after a merge attempt. Normally, this assumption holds true. However, in one edge-case scenario where a merg...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: iouring: prevents opcode speculation. sqe-opcode is used for different tables; ensure that we address this issue against speculation...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fixed NULL pointer dereference in the KFD queue. Through KFD IOCTL fuzing, we encountered a NULL pointer dereference when calling kfdqueueacquirebuffers. Cherry-picked from commit 049e5bf3c8406f87c3d8e1958e0a16804fa1d...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Fixed the ref counting in cpufreqpolicy. The function amdpstateupdatelimits takes a reference to cpufreqpolicy, but does not decrement the reference count during one of the exit paths. This issue has been fixe...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fixed deadlocks related to PM in MS IOCTLs. Prevent runtime resume/suspend while MS IOCTLs are in progress. A failed suspend will invoke ivpumscleanup, which will attempt to acquire filepriv-mslock, a lock that is...