Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Prevent race during ffsep0queuewait When performing fast composition switching, there is a possibility that the process of ffsep0write/ffsep0read may enter a race condition due to ep0req being freed from the...

PT-2023-35333

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.272 Description A potential issue exists due to a race condition during ffs ep0 queue wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2023-35291

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description A potential issue exists due to a race during ffs ep0 queue wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-35153

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.91 Description A potential issue exists due to a race during ffs ep0 queue wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-35230

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.166 Description A potential issue exists due to a race condition during ffs ep0 queue wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-22685 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write in the dwc3 gadget ep0 queue function of ep0.c due to improper locking. This could lead to local escalation of privilege with no additional execution privilege...