Linux driver/infiniband/hw/mlx5/main.c Buffer Overflow

The vulnerability of the drivers/infiniband/hw/mlx5/main.c component of the Linux operating system is related to insufficient control over resources with dynamic management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux RAID10 Component Compromise

The vulnerability of the drivers/md/raid10.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel t7xx_port_ctrl_tx Heap Buffer Overflow DoS

The vulnerability of the t7xxportctrltx function in the drivers/net/wwan/t7xx/t7xxportwwan.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Function Use-After-Free

The vulnerability of the managdcreatemanawqcq function in the drivers/net/ethernet/microsoft/mana/gdmamain.c file of the Linux kernel is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Component DoS

The vulnerability in the drivers/infiniband/hw/mlx5/devx.c component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the xilinxspifindbuffersize function in the drivers/spi/spi-xilinx.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel srpt_get_desc_tbl Heap Buffer Overflow

The vulnerability of the srptgetdesctbl function in the drivers/infiniband/ulp/srpt/ibsrpt.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...

Linux kernel vxlan_gro_prepare_receive Heap Buffer Overflow DoS

The vulnerability of the vxlangropreparereceive function in the drivers/net/vxlan/vxlancore.c component of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...

Linux driver power supply core Heap Buffer Overflow DoS

The vulnerability in the drivers/power/supply/powersupplycore.c component of the Linux operating system is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux kernel vhost_zerocopy_complete Heap Buffer Overflow DoS

The vulnerability of the vhostzerocopycomplete function in the drivers/vhost/net.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9k: hifusb: Do not dereference hifdev after re-arming the firmware request The ath9khifrequestfirmware function re-arms an asynchronous firmware load via requestfirmwarenowait, passing hifdev as the completion context...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drivers:md: fix a potential use-after-free bug At line 2884, the statement "raid5releasestripesh;" removes the reference to sh, which may cause sh to be released. However, sh is later used in line 2886, where it appears in the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: Added guards for HIDCLAIMEDINPUT in raw event callbacks; these guards were previously missing. In commit 2ff5baa9b527 “HID: appleir: Fix potential NULL dereference at raw event handling”, we addressed the issue where raw eve...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: The issue with ucan now has a corrected handling of the lifetime of device resources. USB drivers bind to USB interfaces, and any device’s managed resources should have their lifetime tied to the interface, rather than the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: phy: It is now possible to allow the MDIO bus’s PM operations to initiate/stop the state machine for the phylink-controlled PHY. There are two types of DSA drivers: 1. Those that call dsaswitchsuspend and dsaswitchresume...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/rcar: Fixed error checking in probe This code accidentally called thermalzonedeviceenable before checking whether thermalzonedeviceregisterwithtrips failed. The call was moved to a later stage to avoid dereferenci...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: “Revert ‘thermal/drivers/hwmon: Cleanup coding style a bit’” The commit 030a48b0f6ce “thermal/drivers/hwmon: Cleanup coding style a bit” introduced a use-after-free in the error path of thermaladdHWMonsysfs, by removing a valid...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: SoundWire: Revisiting the driver’s bind/unbind operations and callbacks In the SoundWire framework, we store a pointer from the driver operations in the “slave” structure. This can lead to kernel errors when unbinding codec...

USN-8922-2: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

USN-8922-2 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...