615172 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: btrfs: fixed memory leak in btrfsdoencodedwrite Local fuzzing of 6.12.94 identified the following memory leak: Unreferenced object 0xffff888018050a80 size 64: comm "syz.0.17", pid 10297, jiffies 4294953601 hex dump first 32 bytes...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: ipip: requires CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns: devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: fix potential memory leak in ipw2100pciinitone The memory allocated in the ipw2100allocdevice function is not freed in some of the error paths in ipw2100pciinitone. Fix that by converting the direct return into a...
Astra Linux – vulnerability in linux-6.12, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remote proc starts while the NGD driver is being probed, or when the remote proc is already up during PDR lookup registration, or in the theoretical...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avchaspermnoaudit avchaspermnoaudit is documented to return a copy of the access decision in @avd; however, its early return when the requested permission is empty leaves the buffer unchanged...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-field. However, it is never fully initialized. On architectures where...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: validate skbdst before accessing it tc ingress and openvswitch do not guarantee that routing information is available. These subsystems rely on the conntrack helper infrastructure, and the SIP helper...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains two bare decode operations that allow a malicious or compromised OSD to trigger slab-out-of-bounds reads: 1. cephdecode32p at the...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths iforceprocesspacket reads fixed fields from joystick, wheel, and status packets without first checking their lengths. In particular, the shared hats-and-buttons helper unconditionally...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses The “DEC0 MODE” to “DEC7 MODE” controls are enumerated; however, txmacrodecmodeget and txmacrodecmodeput access their values via ucontrol-value.integer.value0 a long rather...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421hubcontrol The max3421hubcontrol function handles USB hub class requests to the virtual root hub. In both the ClearPortFeature and SetPortFeature switch statements, it modifie...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Cancel NetUP CI work prior to teardown netupciexit frees a netupcistate while its work item, netupreadcistatus, may still be pending or running on the system workqueue. The worker obtains the state via containerof...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork copyhugetlbpagerange clears the uffd-wp bit of migration and hwpoison entries using hugepteclearuffdwp, which operates on the present-PTE bit position. Swap...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use set info with opener credentials SMB2 SETINFO handlers invoke path-based VFS helpers after verifying the access mask granted to the SMB handle. These helpers perform their own ownership, inode permission, and LSM check...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fslaudmix: Validate written enum values fslaudmixputmixclksrc and fslaudmixputoutsrc convert the user-provided enum item using sndsocenumitemtoval before checking whether the item is within the enum’s allowed range. Th...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eirgetservicedata eirgetservicedata iterates through the advertising data for a Service Data field matching a specific UUID. Upon encountering a mismatch, it increments: eir += dlen; eirlen -= dlen...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC driver registers its IRQ handler with devmrequestirq in bdcudcinit, so the IRQ is released by devm only after bdcremove returns. devm...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2cmuxaddadapter takes a reference to the Device Tree channel node before registering the new adapter. If adapter registration fails, the error path frees the private data...