Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: PCI: Fixed a use-after-free in pcibusreleasedomainnr. The commit c14f7ccc9f5d “PCI: Assign PCI domain IDs using idaalloc” introduced a use-after-free bug during the bus removal process. This issue was discovered with kfence:...

PT-2024-36866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises in the Linux kernel's PCI endpoint functionality, specifically in the pci epc destroy function. This function invokes pci bus release domain nr to release the PCI domain...

PT-2025-38213

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue was identified in the Linux kernel related to PCI bus removal cleanup. Specifically, the vulnerability occurs in the pci bus release domain nr function after the...