Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Treat the DPT BO as a framebuffer. Currently, i915gemobjectisframebuffer does not treat the BO containing the DPT as a framebuffer itself. This means that the shrinker can evict the DPT BO while leaving the actual F...

Astra Linux - уязвимость в intel-microcode

Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

Astra Linux - уязвимость в intel-microcode

The removal or modification of security-critical code in certain Intel processors may allow an authenticated user to potentially enable information disclosure through local access...

Astra Linux - уязвимость в intel-microcode

Insufficient granularity of access control in out-of-band management in some IntelR Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access...

Astra Linux - уязвимость в intel-microcode

Incorrect calculation in microcode keying mechanism for some 3rd Generation IntelR XeonR Scalable Processors may allow a privileged user to potentially enable information disclosure via local access...

Astra Linux - уязвимость в intel-microcode

Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access...

Astra Linux – Vulnerability in Qemu

A stack overflow vulnerability was discovered in the Intel HD Audio device intel-hda of QEMU. A malicious guest could exploit this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The greatest threat posed by this vulnerability is to system availability. Thi...

Astra Linux - уязвимость в intel-microcode

A observable discrepancy in the RAPL interface of certain Intel processors may allow a privileged user to potentially enable information disclosure through local access...

Astra Linux – Vulnerability in Intel Microcode

Insufficient granularity of access control in the OOB-MSM for some IntelR XeonR 6 Scalable processors may allow a privileged user to potentially enable escalation of privileges through adjacent access...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: mvm: Pause TCM when the firmware is stopped Not doing so will cause us to send a host command to the transport while the firmware is inactive, which will trigger a WARNING. bad state = 0 WARNING: CPU: 2 PID: 17434 ...

Astra Linux – Vulnerability in Intel Microcode

Improper finite state machines FSMs in hardware logic of certain Intel processors may allow a privileged user to potentially exploit a denial of service attack through local access...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intelpstate: A issue related to the object lifecycle was fixed in updateqosrequest. The cpufreqcpuput call in updateqosrequest occurs too early. This is because updateqosrequest subsequently calls freqqosupdaterequest,...

Astra Linux – Vulnerability in Linux, Linux 5.10, Intel-Microcode

Incomplete cleanup of multi-core shared buffers on certain Intel processors may allow an authenticated user to potentially disclose information through local access...

Astra Linux – Vulnerability in Linux, Linux 5.10

The non-transparent sharing of branch predictor selectors between contexts in some Intel processors may allow an authorized user to potentially enable information disclosure through local access...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: intel-vbtn – Protect the ACPI notify handler from racing with itself Since the commit e2ffcda16290 “ACPI: OSL: Allow Notify handlers to run on all CPUs”, ACPI notify handlers like intel-vbtn’s notifyhandler may run ...

Astra Linux - уязвимость в linux-5.15

A NULL pointer dereference flaw was discovered in the Linux kernel’s KVM module. This flaw can lead to a denial of service in the x86emulateinsn function in arch/x86/kvm/emulate.c. The flaw occurs when an illegal instruction is executed on the guest CPU of the Intel model...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fixed a bo leak in intelfbboframebufferinit. Added a unreference of “bo” in the error path to prevent the leakage of a “bo” reference. Return 0 on success to clarify the success path. Cherry-picked from commit...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Thermal: Intel: int340x: Processor: Fixing a warning during module unloading The processorthermal driver uses pcimdeviceenable to enable a PCI device. This means that the device will be automatically disabled when the driver is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mfd: intelsocpmicbxtwc: Use the IRQ domain for PMIC devices While the idea of adapting the driver to utilize the hierarchy of IRQ chips is correct from a design perspective, the implementation contains flaws. This issue was...

Astra Linux – Vulnerability in Intel Microcode

Improper finite state machines in the hardware logic of some 4th and 5th generation IntelR XeonR processors may allow an authorized user to potentially enable denial of service via local access...