Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: Fixed a use-after-free in powersupplychanged. Using the devm variant for requesting IRQs before using the devm variant for allocating/registering the powersupply handle means that the powersupply handle wi...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: amt: The pointer to the skb header is reread after each pull operation. Several AMT receive and transmit paths cache the pointer to the skb header iphdr, ipv6hdr, ethhdr, or the AMT message header, and then call a helper...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: filelock: The lock is removed reliably when a race condition involving fcntl/close is detected. When a race condition occurs between fcntlsetlk and close, the created lock is removed using dolockfilewait. However, LSMs may all...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: msft: fixed a slab-use-after-free in msftdoclose By tying the lifetime of msft-data to hdev by freeing it in hcireleasedev, the following issue was addressed: Use msftdoclose msft = hdev-msftdata; if !msft ...1...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel version up to 6.1.9, there is a use-after-free issue in the bigbenremove function within the drivers/hid/hid-bigbenff.c file, caused by a crafted USB device. This issue arises because the LED controllers remain registered for an excessively long period of time...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sun6i-dma: Fixed the issue where descriptors were not properly reclaimed when terminating DMA transfers. When terminating DMA transfers, active descriptors were not properly reclaimed. Only cyclic descriptors were...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: Check whether leafidx is greater than the number of leaves per dmap tree. syzbot reported an out-of-bounds error in dbSplit. This occurs when dmtleafidx is greater than the number of leaves per dmap tree. A check for...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm/slub: Avoid accessing metadata when the pointer is invalid in objecterr. objecterr reports details about an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempti...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: schsfb: Replace the direct dequeue call with peek and qdiscdequeuepeeked. When sfb has children e.g., qfq qdisc whose peek callback is qdiscpeekdequeued, we could encounter a kernel panic. When the parent of such qdisc...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/64: The jump labels are called before parseearlyparam is executed. On 64-bit systems, calling jumplabelinit within setupfeaturekeys is too late because static keys may be used in subroutines of parseearlyparam, which in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering. This ensures that any RCU readers traversing the instance list have completed their operations before releasing the reference to the tracer that the instance points to...

Astra Linux – Vulnerability in Linux 5.15

A issue was discovered in the Linux kernel before version 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, resulting in an out-of-bounds read in the ntfssetea function in fs/ntfs3/xattr.c...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd934x: Properly handles channel mapping lists. Currently, each channel is added as a list to the dai channel list. However, there is a risk of adding the same channel to multiple dai channel lists, which could lea...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root causes of this issue are as follows: 1. When probing the usbnet device and executing usbnetlinkchangedev, 0, 0, the kevent operation is placed in the global workqueue. However, the...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel before version 5.8.10. The file virt/kvm/kvmmain.c contains a memory leak in kvmiobusunregisterdev due to a kmalloc failure, identified as CID-f65886606c2d...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt – restore callback for non-parallel fallback pcrypt installs pcryptaeaddone on the child AEAD request before attempting to submit it through padata. If padatadoparallel returns -EBUSY, pcrypt reverts to directly...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: vhost/vdpa: The vhostvdpammap and vhostvdpafault functions use vma-vmpgoff as a virtqueue index for getvqnotification, but they do not validate that the index is smaller than v-nvqs. The ioctl path already performs both a boun...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Audit: Fixed a potential use-after-free in auditdelrule. The auditdelrule function destroys the e-rule.exe object via auditremovemarkrule. This occurs before unlinking the rule from RCU-visible filter lists and waiting for a grac...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: mpt3sas: Fixed a memory leak Added a forgotten kfree function...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fixed a device reference leak that occurred during failed lookups. Be sure to release the reference to the SCP device when attempting to retrieve its driver data, before the driver has been bound...