Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: dlmfs: Fixed error handling for userdlmdestroyLock. When userdlmdestroyLock fails, it does not clean up the flags it set before exiting. For the USERLOCKINTEARDOWN condition, if this function fails because the lock is...

The vulnerability of the dlm_midcomms_commit_mhandle() function in the fs/dlm/midcomms.c module exposes the security of block devices in Linux distributed computing environments, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dlmmidcommscommitmhandle function in the fs/dlm/midcomms.c module, which is part of the Linux kernel’s distributed locking mechanism, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the dlm_posix_lock() function in the fs/dlm/plock.c module exposes the support for Linux’s distributed locking mechanism in kernel-level locking. This allows an attacker to gain access to protected information or cause service failures.

The vulnerability of the dlmposixlock function in the fs/dlm/plock.c module, which supports Linux kernel-based distributed locking mechanisms, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service...

The vulnerabilities of the functions dlm_lowcomms_new_msg() and dlm_lowcomms_commit_msg() in the fs/dlm/lowcomms.c module allow a hacker to cause a service failure. These vulnerabilities are related to Linux’s distributed locking mechanism.

The vulnerabilities of the functions dlmlowcommsnewmsg and dlmlowcommscommitmsg in the fs/dlm/lowcomms.c module are related to errors during the update of the reference counter in Linux’s distributed locking mechanism. Exploiting these vulnerabilities can allow an attacker to cause service failur...

The vulnerability of the new_lockspace() function in the fs/dlm/lockspace.c module, which is part of the Linux kernel’s distributed locking manager support, allows a attacker to cause a service failure.

The vulnerability of the newlockspace function in the fs/dlm/lockspace.c module, which is part of the Linux kernel’s distributed locking manager support, relates to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to trigger a service failure...