615180 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers receive a struct device pointer and call devgetdrvdata to retrieve the driver data. However, the driver data is set only at the end of the probe, after...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210ahub: Validate written enum value tegraahubputvalueenum reads e-valuesitem0 before checking whether item0 is within the enum item range. The existing check therefore happens too late to prevent an out-of-rang...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parallel claim add batadvblaaddclaim is used to add claims and modify the backbone of claims for CLAIM frames from remote backbones and local packets. When it handles a claim, it needs...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicastttvn skb-data only after skb realloc The pskbmaypull function called by batadvgetvid may reallocate the buffer behind the skb. Variables referencing the old buffer must be reassigned to prevent...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 “net: bridge: xmit: make sure we have at least eth header len bytes”, it is possible for a local user with eBPF TC hook access to attach a tc...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndes1938mixer does not check the return value before dereferencing the pointer, which can lead to a NULL pointer dereference. A...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice using videodevicealloc, and releases it if videoregisterdevice fails. This can lead to double-freeing the videodevice...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcppmdestroy empties msk-pm.annolist and msk-pm.userspacepmlocaladdrlist under msk-pm.lock during socket teardown, dropping the lock between the two. A concurrent...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check the return value of rpcsockaddr2uaddr in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking whether it is NULL. rpcsockaddr2uaddr return...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: do not queue completed sysfs fallback requests fwloadsysfsfallback calls deviceadd before adding the fwpriv to pendingfwhead. deviceadd publishes the fallback loading interface; thus, a userspace helper that...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net/sched: schhfsc: Do not make class passive twice updatevf is called from two places for the same class during a single dequeue when the class’s child qdisc e.g., codel/fqcodel drops its last packets while dequeuing: 1. The chi...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM’s internal “service pending PV EOI” request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites sendsignallocked rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Free guest debug data on vcpu destroy kvms390clearbpdata is only called from kvmarchvcpuioctlsetguestdebug, i.e., when user space changes or disables debugging. When a vCPU is destroyed while hardware breakpoints remai...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes the queue state and then marks the queue as enabled. The interrupt and request paths check whether the queue is enabled before using that stat...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable prior to the first open; thus, querying its index may result in a NULL pointer dereference. Registration failures can also leave an error pointer in...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: cpuidle: dtidlegenpd: kfree the original name allocation dtidlepdalloc calls kasprintf to get the full node path, then passes pd-name to kbasename for processing. dtidlepdfree frees pd-name, which is no longer the beginning of th...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: do not add sk to the parent socket’s accept queue unless BTLISTEN is set. The new sk should not be added to the parent socket’s accept queue after last l2capsockcleanuplisten has been executed in...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfsioctrim Syzkaller Report Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 1 KASAN: null-ptr-deref in range 0x0000000000000438-0x000000000000043f CPU: 2 UID:...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: futex: Prevent rcuwait use-after-free during requeue PI On PREEMPTRT, FUTEXCMPREQUEUEPI can trigger a KASAN report slab-out-of-bounds in futexrequeuepicomplete when calling rcuwaitwakeup. The futexq used by futexwaitrequeuepi is...