Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: PCI: Fixed reference leak in pciregisterhostbridge If deviceregister fails, call putdevice to release the reference to prevent a memory leak, as noted in the comment on deviceregister. Identified through code review. bhelgaas:...

Astra Linux – vulnerability in Ghostscript

An issue was found in Artifex Ghostscript prior to version 10.05.0. The BJ10V device has a print buffer overflow in contrib/japanese/gdev10v.c...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fixed the issue “KASAN: slab-use-after-free Read in ibdevicerename”. Call Trace: dumpstack: lib/dumpstack.c:94 inline dumpstacklvl+0x116/0x1f0: lib/dumpstack.c:120 printaddressdescription: mm/kasan/report.c:408 inline...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: Balances the device reference count when destroying devices. Using devicefindchild to find the appropriate SCMI device to destroy causes an imbalance in the device reference count. This occurs because...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't call cleanup on profile rollback failure When profile rollback fails in mlx5enetdevchangeprofile, the netdev profile var is left set to NULL. Avoid a crash when unloading the driver by not calling profile-cleanup...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: md: fixed a deadlock between mddevsuspend and flush Bio A deadlock occurs when mddev is suspended while some of the flush Bio operations are still in progress. This is a complex issue. T1: The first flush occurs at the end of...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fixed a deadlock in the usbdeauthorizeinterface function. Among the attribute file callback routines in drivers/usb/core/sysfs.c, the interfaceauthorizedstore function is the only one that acquires a device lock on an...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: USB: core: Prevent nested device-reset calls Automatic kernel fuzzing revealed a recursive locking violation in usb-storage: ============================================ WARNING: possible recursive locking detected 5.18.0 3 Not...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: siox: fix possible memory leak in sioxdeviceadd If deviceregister returns an error in sioxdeviceadd, the name allocated by devsetname must be freed. According to the comment in deviceregister, it should use putdevice to release t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: Ignoring non-functional sensors in the HP 5MP Camera The HP 5MP Camera USB ID 0408:5473 reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iioinfo causes the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add a check for mgmtallocskb in mgmtdeviceconnected Add a check on the return value of mgmtallocskb in mgmtdeviceconnected to prevent null pointer dereferencing...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free in pm8001queuecommand The commit e29c47fe8946 “scsi: pm8001: Simplify pm8001taskexec” includes modifications to pm8001queuecommand. However, it introduces a potential cause of a double-free...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer. Since the report buffer is used by various drivers in various ways, let’s initialize it to zero during allocation, so that it cannot ever be used to leak kernel memory through special...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: mdp3: Fix resource leaks in offinddevicebynode Use putdevice to release the object returned by offinddevicebynode, thereby preventing resource leaks...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: use the correct logic to get mma8452data The original logic for getting mma8452data is incorrect; the dev pointer points to a device belonging to iiodev. We cannot use this dev to determine the correct...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83792d Fix NULL pointer dereference by removing unnecessary structure field If the driver reads val value sufficient for val & 0x08 && !val & 0x80 && val & 0x7 == val 4 & 0x7 from the device, then a NULL pointer dereferen...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Be sure to drop the reference taken when looking up the crossbar platform device during am335x route allocation...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix kernel panic caused by incorrect error handling The error path when failing to register devices on the TEE bus contains a bug that leads to a kernel panic as follows: 15.398930 Unable to handle kernel paging reque...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: nbd: call genlunregisterfamily first in nbdcleanup Otherwise, there may be a race condition between module removal and the handling of netlink commands, which can lead to the oops as shown below: BUG: kernel NULL pointer...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: igb: fix a use-after-free issue in igbcleantxring Fix the following use-after-free bug in the igbcleantxring routine when the NIC is running in XDP mode. The issue can be triggered by redirecting traffic to the igb NIC and then...