Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Proper rollback when ioremap fails. bnxtqpliballocdpi returns success even if ioremap fails. Added proper rollback when ioremap fails and returned the -ENOMEM status...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix for double-free of outcvts due to rawmidi errors The sndumpattachlegacyrawmidi function allocates the legacy conversion array ump-outcvts. In the event of an error with sndrawmidinew, this array is freed using kfre...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rpmsg: Fixed a possible refcount leak in rpmsgregisterdeviceoverride. rpmsgregisterdeviceoverride must call putdevice to free the vch when driversetoverride fails. This issue was fixed by adding a call to putdevice in the erro...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Staging: rtl8723bs – fixed the stainfo check in rtwaesdecrypt. The null-pointer-guard was incorrect; it previously returned FAIL for valid pointers. The guard has been inverted so that it now returns FAIL for invalid pointers...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, for the dsa interface, in the mxl862xx module, there was a issue where the DSA ports were freed after they had been used. Upon a MDIO CRC error, the mxl862xxcrcerrworkfn function iterates through the DSA por...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Fixed a memory leak in the insertrange error path. The ntfsnonresidentattrinsertrange function allocates holerl before mapping the entire runlist. If ntfsattrmapwholerunlist fails, the error path terminates with...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: The sanitize MFT references function returned by ntfslookup inodebyname has been fixed. ntfslookup inodebyname now returns MFT references that are read from directory index entries on the disk. These values are untrusted...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nvme-core: fixed a memory leak in dhchapctrlsecret. Free dhchapsecret from nvmectrldhchapctrlsecretstore before returning, when nvmeauthGenerateKey returns an error...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: A memory leak has been fixed in mlx5efsttredirectanycreate. The memory pointed to by the fs-any pointer is not freed during the error-prone execution of mlx5efsttredirectanycreate, which can lead to a memory leak. This...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: The issue of leaking the QID bit in pqmcreatequeue has been fixed. When MES is enabled and amdgpuamdkfdallockernelmem fails during the first queue creation for a process, pqmcreatequeue returns early using ‘return...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: btmtk: fixed the URB leak in the allocmtkintrurb error path When btmtkisopktpad fails, the previously allocated URB is not freed, causing the urb structure to leak. Add usbfreeurb before returning the error...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validates NIX’s maximum number of LFs correctly. NIX’s maximum number of LFs can be set using the devlink command. However, this can be done before assigning any LFs to a PF/VF. The condition used to check whether a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/memoryhotplug: Fixed the issue of incorrect altmap being passed in the error path. In the function createaltmapsandmemoryblocks, when archaddmemory succeeds with memmaponmemory enabled, the vmemmap pages are allocated from...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: Use pmruntimeresumeandget in suspend. Replace pmruntimegetsync with pmruntimeresumeandget to simplify error handling. pmruntimeresumeandget automatically drops the usage counter in case of failure, eliminati...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG – Fixed an off-by-one issue in the rollback of single-FDB errors. When a failure occurs at index i, the reverse cleanup loop in mlx5lagcreatesinglefdb starts from i. As a result, the failed index itself is rolled...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for schemeadddirs internal error The damonsysfsschemeadddirs function sets the triedregions directory after the stats directory is set up. When the setup of the triedregions directory fails, the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ext2: Fixed the issue where the ignored return value from genericwritesync was not handled properly. Fixed ext2diowriteiter to propagate the error returned by genericwritesync, instead of silently discarding it. This could cause...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path The commit 7c75bde329d7 “usb: musb: musbdsps: requestirq after initializing musb” has corrected the calls to dspssetupoptionalvbusirq and dspscreatemusbpdev, but it did not update the err...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed the handling of a reply packet before data transmission. rxrpcreceivingreply was fixed to handle the reception of a reply packet before rxrpc has a chance to send any request DATA packets during a client call. Thi...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operations The ioctls for sessions are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...