Astra Linux – Vulnerability in Chromium

The use of after-free in the Input mechanism in Google Chrome before version 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in connman

In ConnMan version 1.41, a man-in-the-middle attack against a WISPR HTTP query could cause a use-after-free error in WISPR handling, resulting in crashes or code execution...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fixed a possible use-after-free issue when removing a bridge port. When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disabling the per-port multicast context on each port a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hdlcppp: Synchronization of per-protocol timers before freeing the hdlc state Each PPP control protocol LCP/IPCP/IPV6CP embedded in struct ppp registers a timer via timersetup. This struct ppp represents the hdlc-state allocation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Audit: Fixed a potential use-after-free in auditdelrule. The auditdelrule function destroys the e-rule.exe object via auditremovemarkrule. This occurs before unlinking the rule from RCU-visible filter lists and waiting for a grac...

Astra Linux – Vulnerability in Linux

In the Linux kernel before version 5.11.14, there is a use-after-free issue in the cipsov4genopt module, located in net/ipv4/cipsoipv4.c. This issue arises due to improper handling of the CIPSO and CALIPSO reference counts related to DOI definitions. As a result, an arbitrary value is written to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: It was discovered that nfqueue holds the bridgeskb-dev variable while the packet is being queued. The function brpassFrameup reassigns skb-dev from the ingress port to the bridge master before queuing bridge...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: Cancel pending work on remove to fix a use-after-free issue. The lgg15data structure is allocated with devm and contains a work item. The report handlers schedule this work directly from the device input. lgg15event...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: veth: Fixed NAPI leak in the XDP enable error path During XDP enablement in a veth device, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes made. However, the rollback loop: for i--; i = start; i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipc: limits the allocation of the next ID to the valid ID range. The checkpoint/restore sysctl path can request the next SysV IPC ID through ids-nextid. Currently, ipcidralloc forwards this request to idralloc with an open-ended...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tipc: fixed the double-free issue in tipcbufAppend. In tipcmsgvalidate, the skb being validated may be reallocated, causing the old skb to be freed. In tipcbufAppend, this function was called with a pointer to a local variable...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipv4: net-ipv4.sysctllocalreservedports is freed too soon after unregisternetsysctltable. The function ipv4sysctlexitnet currently frees net-ipv4.sysctllocalreservedports too quickly. Only after unregisternetsysctltable can we be...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fixed a double-free in rxesrqfrominit. In rxesrqfrominit, the queue pointer q is assigned to srq-rq.queue before copying the SRQ number to user space. If copytouser fails, the function calls rxequeuecleanup to free the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: A use-after-free issue was addressed in VEPA multicast source pruning. In ixgbevfcleanrxirq, frames whose source MAC matches the own address of the VF are pruned by freeing the skb and proceeding to the next descriptor...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipvs: Do not propagate the “one-packet” flag to synced connections. Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies the connection flags from the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: sctp: Purge the outqueue when handling stale COOKIE-ECHO The sctpstreamupdate function is only invoked when the association is moved to COOKIEWAIT during association setup/reconfiguration. In this case, the outbound stream...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: a fix was made to avoid a Use-After-Free issue in f2fswriteendio. According to syzbot, a use-after-free issue occurred in f2fswriteendio. This issue is caused by the following race condition: Loop device Unmount Worker...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can result in the callback being fired later, thereby causing a use-after-free when using the channel. This vulnerability can be exploited by a malicious...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: misc/libmasm/module: Two use-after-free operations in ibmasminitone have been fixed. In ibmasminitone, it calls ibmasminitremoteinputdev. Inside ibmasminitremoteinputdev, mousedev and keybddev are allocated by inputallocatedevice...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: tee, amdtee: fixed the use-after-free vulnerability in amdteeclosesession. There is a potential race condition in amdteeclosesession that may cause a use-after-free in amdteeopenSession. For example, if a session has a referen...