Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/srpt: Do not register the event handler until the srpt device is fully set up. In rare cases, KASAN reports a use-after-free error in the srptrefreshport function. This appears to occur because the event handler is...

CVE-2024-26872

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions, KASAN reports a use-after-free Write in srptrefreshport. This seems to be because an event handler is registered before the srpt devic...

Firefox Data Compromise

The use of this functionality after liberation in the nsEventListenerManager::CompileEventHandlerInternal method of the browser event registration manager for Mozilla Firefox allows a remote attacker to execute arbitrary code or cause a service failure e.g., errors in handling dynamic memory. Thi...