Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecuart: properly fixed the race condition The crosecuartprobe function calls devmserdevdeviceopen before calling serdevdevicesetclientops. This can lead to a NULL pointer dereference: BUG: NULL pointer...

The vulnerability of the `cros_ec_uart_probe()` function in the `drivers/platform/chrome/cros_ec_uart.c` module exposes the support for Linux kernel-based Chrome OS hardware devices, allowing a malicious actor to cause service failure.

The vulnerability of the crosecuartprobe function in the drivers/platform/chrome/crosecuart.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...