Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: NFS: A race condition during the update of an existing write request has been fixed. After the nfslockandjoinrequests function checks whether the request is still attached to the mapping, nothing prevents a call to nfs...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Staging: rtl8712: fixed a use-after-free in rtl8712dlfw Syzbot reported a use-after-free in rtl8712dlfw. The issue occurred due to a race condition between r871xudevremove and dondoopen callbacks. It’s clear from the crash log...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In OpenVSwitch, the defertunnelnetdevput function is delayed until the RCU callback is executed. The ovsnetdevtunnelDestroy function may be executed after NETDEVUNREGISTER has already detached the device. Dropping the reference t...

Astra Linux – Vulnerability in Firefox and Thunderbird

A race condition could allow a cross-origin container to obtain permissions from the top-level origin. This vulnerability affects Firefox 128, Firefox ESR 115.13, Thunderbird 115.13, and Thunderbird 128...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nilfs2: A potential UAF Use-After-Free error in struct nilfsscinfo can be prevented in nilfssegctorthread. The finalization of nilfssegctorthread may race with nilfssegctorkillthread, which terminates that thread. This could...

Astra Linux – Vulnerability in Linux

The file net/bluetooth/hcirequest.c in the Linux kernel, up to version 5.12.2, contains a race condition related to the removal of the HCI controller...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: ipset: Fixed issues related to region locking in hash types. The region locking mechanism introduced in v5.6-rc4 included three macros for handling region locks: ahashbucketstart, ahashbucketend which return the sta...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: l2cap: fixed a nullptrderef in l2capchantimeout. There is a race condition between l2capchantimeout and l2capchandel. When we use l2capchandel to delete the channel, the chan-conn will be set to null. However, the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cgroup: Fixed a race condition between task migration and iteration. When a task is migrated out of a cssset, the cgroupmigrateaddtask function first moves the task from cset-tasks to cset-mgtasks using: listmovetail&task-cglist,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fixed a race condition in qfqaggregate. A race condition can occur when qfqchangeagg is modified called during qfqenqueue while other threads access it concurrently. For example, qfqdumpclass may trigger a NULL...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/irdma: Fixed the KASAN issue related to tasklets. KASAN testing revealed the following issue related to the deletion of an IRQ. 50006.466686 Call Trace: 50006.466691 50006.489538 dumpstack+0x5c/0x80 50006.493475...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting events with an invalid wd value. When inotifyfreeingmark races with inotifyhandleinodeevent, it is possible that inotifyhandle inodeevent sees that imark-wd has already been reset to -1 and reports this...

Astra Linux – Vulnerability in Linux 5.10

A use-after-free vulnerability was discovered in the drmleaseheld function in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race condition. This flaw allows a local user privilege attacker to cause a Denial of Service DoS attack or lead to a kernel information leak...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Media: BTTV – Fixed an issue where a use-after-free error occurred due to the btv-timeout timer. There may be a race condition between the btvirqtimeout timer function and bttvremove. The timer is set up in the probe phase, and...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fixed an Oops in the dasdaliasgetstartdev function due to a missing pavgroup parameter. The Oops occurred because the pavgroup pointer was set to NULL before the function was entered. This allowed a race condition...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: USB: dummy-hcd: Fixed locking/synchronization errors Syzbot testing was able to cause an addressing exception and a crash in the usbgadgetudcreset routine in drivers/usb/gadgets/udc/core.c. This occurred because the routine wa...

Astra Linux – Vulnerability in libexif

In libexif versions up to 0.6.25, a integer underflow in size checking for Fuji and Olympus MakerNote decoding could be exploited by attackers to cause programs that use libexif to crash or leak information...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: eeprom: at24 – fixed a memory corruption race condition. If the eeprom is not accessible, a nvmem device will be registered. In this case, the read operation will fail, and the device will be torn down. If another driver...

Astra Linux – Vulnerability in Linux 5.10, Linux

A out-of-bounds read flaw was discovered in the Linux kernel’s TeleTYpe subsystem. The issue arises when a user triggers a race condition using ioctls TIOCSPTLCK, TIOCGPTPEER, TIOCSTI, and TCXONC, accompanied by memory leakage in the flushtoldisc function. This flaw allows a local user to crash t...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5: Fixed a race condition related to command flushing flows. Fixed a warning due to a reference count issue after freeing memory, caused by a race condition involving command entries. This race condition occurs when one...