197824 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fixed a use-after-free in siwaccept siwaccept looks up the QP provided by the user space. If that QP is already in RTS, the function jumps to error cleanup before associating the incoming CEP with it. The cleanup checks...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed an assertion issue when building the free space tree. When building the free space tree with the block group tree feature enabled, an assertion failure may occur like this: BTRFS info device loop0 state M: rebuilding...
Astra Linux – Vulnerability in libxml2
The xmlXIncludeAddNode function in xinclude.c within libxml2, prior to version 2.11.0, has a use-after-free issue...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: In the mm/pagealloc function, the clearpage-private operation is performed in freepagesprepare. Several subsystems slub, shmem, ttm, etc. use page-private, but they do not clear it before freeing pages. When these pages are later...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: smb: Client: Fixed a potential Use-after-Free UAF in isvalidoplockbreak. Skipped sessions that are being torn down status == SESEXITING to avoid UAF...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: misc: fastrpc: Do not remove the map from createprocess and devicerelease. Do not remove the map from the list during the error handling in fastrpcinitcreateprocess. Instead, call fastrpcmapput to avoid a use-after-free...
Astra Linux – Vulnerability in Chromium
Before version 89.0.4389.90, using Blink with a "after free" mechanism allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Before version 88.0.4324.96, using Blink with a "after free" mechanism allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: remove blockcb from driverlist before freeing Error handler of tcfblockbind frees the whole bo-cblist on error. However, by that time the flowblockcb instances are already in the driver list because driver...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915 – Fixed the issue where the ext PHY was freed after a register error occurred. After the mt7915registerextPhy function succeeded, there was a failure in the main PHY-related functions like mt7915initdebugfs or...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/meson: fixed a memory leak in the -hpdnotify callback. The EDID returned by drmbridgegetedid needs to be freed...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: gtp: Fixed use-after-free and null-ptr-deref issues in gtpnewlink. The gtplinkops operation structure for the subsystem must be registered after registering the gtpnetops pernet operation structure. Syzkaller encountered a...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect The submitted write URBs are not stopped when the function close is called. Therefore, they need to be stopped unconditionally when the function disconnect is called, to avoid...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: cpufreq: In the pcc module, issues related to use-after-free and double-free operations during OSC evaluations were addressed. The function pcccpufreqdoosc calls acpievaluateobject twice during the two-phase OSC negotiation...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: USB: ldusb: fixed a use-after-free issue during disconnection handling. The mutexunlock function may access the mutex structure after releasing the lock. Therefore, it cannot be used to directly manage the lifetime of objects...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: tipc: Fixed a use-after-free of the discoverer in tipcdiscrcv. bearerdisable frees b-disc using tipcdiscdelete’s plain kfree, but tipcdiscrcv still dereferences b-disc in the RX softirq under rcureadlock from tipcudprecv to...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fixed the use of variables after they are freed in fcexchabtsresp. The function fcexchrelease/ep decreases the reference count of the ep variable. When the reference count reaches zero, the ep variable is freed...
Astra Linux – Vulnerability in Chromium
Before version 87.0.4280.141, using "after free" in audio playback in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
The use of after-free in InterestGroups in Google Chrome before version 149.0.7827.103 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...