Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: mm/mempolicy: fixed an issue where uninit-value was present in mpolrebindpolicy. mpolsetnodemask mm/mempolicy.c does not set the nodemask when pol-mode is MPOLLOCAL. Check pol-mode before accessing pol-w.cpusetmemsallowed in...

DEBIAN-CVE-2022-50147

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix getnodes out of bound access When user specified more nodes than supported, getnodes will access nmask array out of bounds...

kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact

The dogetmempolicy function in mm/mempolicy.c in the Linux kernel allows local users to hit a use-after-free bug via crafted system calls and thus cause a denial of service DoS or possibly have unspecified other impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out...