Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: gfs2: The use-of-free variable issue in gfs2glockshrinkscan has been fixed. The GLFLRU flag is checked under lrulock in gfs2glockremovefromlru, to remove a glock from the lru list in gfs2glockput. During the shrink scan process,...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.114, using "after free" in WebGL in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: zsmalloc: Fixed races between asynchronous zspage free operations and page migration. The asynchronous zspage free worker attempts to lock the entire page list of a zspage, without protecting against page migration. Since page...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double-free in probe error path The usbinitializegadget function installs gadgetrelease as the release callback for the embedded gadget device. Therefore, the struct net2280 instance is released through...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: Fixed a use-after-free in powersupplychanged. Using the devm variant for requesting IRQs before using the devm variant for allocating/registering the powersupply handle means that the powersupply handle wi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “Revert ‘hwmon: ibmpex fix use-after-free in high/low store’” This change is reflected in commit 6946c726c3f4c36f0f049e6f97e88c510b15f65d. Jean Delvare points out that the patch does not completely fix the reported problem...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering. This ensures that any RCU readers traversing the instance list have completed their operations before releasing the reference to the tracer that the instance points to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: bridge: fixed a stale prevhdr pointer in brip6fragment brip6fragment retrieves prevhdr, a pointer to the skb head, from ip6find1stfragopt, then calls skbchecksumhelp. For a cloned skb, skbchecksumhelp reallocates th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: irqwork: A use-after-free issue was addressed in irqworksingle on PREEMPTRT. On PREEMPTRT, non-HARD irqwork operations are executed via per-CPU kthreads through runirqworkd. Therefore, irqworksync uses rcuwait to wait for BUSY==0...

Astra Linux – Vulnerability in Linux 5.15

The function rpmsgvirtioaddctrldev in the file drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel, prior to version 5.18.4, contains a double-free...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: gtp: Fixed use-after-free and null-ptr-deref issues in gtpgenldumppdp. The gtpnetops pernet operations structure for the subsystem must be registered before registering the generic netlink family. Syzkaller reported a “general...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rpmsg: core: fixed a race condition in the driveroverrideshow function and used a core helper function. The driveroverrideshow function reads the driveroverride string without holding the devicelock. However, the store function...

Astra Linux – Vulnerability in Chromium

Using “after free” in DevTools in Google Chrome before version 154.0.8037.57 allowed a remote attacker to leverage social engineering to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: byd – synchronize timer deletion before freeing private data. The byddisconnect function uses timerdelete before freeing the driver’s private data. This does not wait for a running bydcleartouch callback, which dereference...

Astra Linux – Vulnerability in TIF format

The loadImage function in tools/tiffcrop.c within LibTIFF, as of version 4.5.0, involves a heap-based use after deallocation, involving a crafted TIFF image...

Astra Linux – Vulnerability in curl

There is a vulnerability in curl version 7.87.0 where it is possible to exploit the memory reclamation mechanism. In this vulnerability, curl can be instructed to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can and often do deny such tunnel operations. When curl...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: 6lowpan: fixed the use-of-free issue in the NHC entry during the error path. The lowpannhcdouncompression function looks up an NHC descriptor while holding the lowpannhclock lock. If the descriptor does not have a uncompress...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: Acquiring the initmm lock during huge vmap operations is necessary to prevent a UAF use-after-free in ptdump. The patch series “mm: fix UAF caused by race between ptdump and vmap pgtable freeing” addresses this issue ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables – Release flowtable after the rcu grace period with an error. The function synchronizercu is called after unregistering the hooks from the error path. This is because a hook that already references this...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The can: bcm code allows for the deferring of the rxop deallocation to the workqueue to fix a thrtimer UAF. The commit f1b4e32aca08 “can: bcm: use callrcu instead of the costly synchronizercu” replaces the synchronizercu in...