Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Prevent the release of journal inode after journal shutdown Before calling ocfs2deleteosb, the function ocfs2journalshutdown has already been executed in ocfs2dismountvolume. Therefore, osb-journal must be NULL. As a resul...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: slip: Reject VJ receive packets on instances with no rstate array. slhcinit accepts rslots == 0 as a valid configuration, which means “no receive compression”. In that case, the allocation loop in slhcinit is skipped, so...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fixed the issue where use-after-free occurred in ibqueryqp. When querying a QP via the netlink flow, the only synchronization mechanism for that QP is rdmarestrackget. However, during the QP destruction process,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: veth: Fixed the issue where the skb length was accounted for after XDP fragment adjustment. The veth vulnerability involves the exposure of non-linear skb fragments through an xdpbuff. When an XDP program adjusts the fragment...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Signal: Avoid shared siginfo namespace rewrites The sendsignallocked function rewrites the sender IDs for the target namespace. When multiple signals are sent, the same siginfo is reused, which may allow one recipient to affect t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: usbtv – Keep the device alive while the ALSA card exists. The ALSA PCM callbacks store the driver’s state in pcm-privatedata. An opened PCM file may remain active even after a USB disconnection occurs, because usbtvaudiofr...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: The flushing of tasks operates in a dependency order. virtiovsockremove stops the virtqueues, then flushes each task before freeing the enclosing virtiovsock. The current order does not take into account dependencie...

Astra Linux – Vulnerability in Linux, Linux 5.10

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling ‘file’ pointer...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fixed an issue where the response queue was consumed excessively in qlaconsumeiocb. The qla24xxprocessresponsequeue function advances the ringptr beyond the head IOCB before dispatching it. By the time...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xdp: Fixed zero-copy frame layout The xdpconvertzctoxdpframe function clones an XSK packet into an order-0 page and uses PAGESIZE as the frame size. This allows the cloned frame to occupy the page tail required by skbsharedinf...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hfi1: Free RX data in case of a late probe failure. The hfi1initdd function allocates the shared AIP/VNIC RX support before returning. If hfi1init or hfi1registeribdevice fail later, initone destroys the device data witho...

Astra Linux – Vulnerability in Chromium

Before version 150.0.7871.47, read and write access in ANGLE using Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in libxstream-java

XStream is a simple library for serializing objects to XML and back again. In affected versions, this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available, by manipulating the processed input stream with a Java runtime version 14 to 8. ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed a potential NULL pointer dereference in the atomctrlgetsmcsclkrangetable function. The function atomctrlgetsmcsclkrangetable does not check the return value of smuatomgetdatatable. If smuatomgetdatatable fails t...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: mm: fixed an unexpected zeroed page mapping with zram swap In cases where two processes are cloning under CLONEVM, a user process may be corrupted when zeroed pages are unexpectedly displayed. CPU A CPU B doswappage doswappage...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: nfc: Fixed races in nfcllcpsockget and nfcllcpsockgetsn. Sili Luo reported a race condition in nfcllcpsockget, which led to a Use-After-Value exception. The process of acquiring a reference to the socket found during a...

Astra Linux – Vulnerability in PackageKit

PackageKit’s apt backend mistakenly treats all local deb files as trustworthy. The apt security model is based on repository trust, not the contents of individual files. On sites where PolicyKit rules are configured, this could allow users to install malicious packages...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: HID: hid-pl: handling probe errors Errors in the init process must be reported back; otherwise, we will follow a NULL pointer the first time FF is used...