Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe The snddummyprobe function blindly trusts that the given devptr-id value is within the proper card index range. It’s fine for the devices created by the driver during the module pro...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xfrm: Fixed the leak in xfrmstateconstruct. attachauthtrunc may allocate x-aalg while leaving x-props.aalgo at zero when the selected authentication algorithm does not have a sadbalgid. An example of this situation is for...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ip6tunnel: Use skbcowhead in ip6tnlxmit. ip6tnlxmit may need to allocate additional headroom before it can send the outer IPv6 and optional encapsulation headers. Currently, it does this using skbreallocheadroom, which copies...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not perform trimming on a device that is not writable. BUG There is a bug report where btrfs/242 can randomly fail due to a NULL pointer dereference at the following locations: - Run fstests btrfs/242 at 2026-06-01...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drbd: Rejects data replies with an out-of-range payload size. The recvdlessread function receives a PDATAREPLY from a peer into the bio of an outstanding read request. The payload length provided by the peer is stored as the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: can: isotp: Serializing TX state transitions under so-rxlock The TX state machine so-tx.state is controlled by three contexts: 1. sendmsg claims and progresses a transfer; 2. the RX path handles Flow Control/echo frames; 3. two...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: gpio: ml-ioh: using rawspinlockt as the register lock The iohirqtype function is registered as the irqchip .irqsettype callback. It takes chip-spinlock with spinlockirqsave. This callback is accessed from setupirq -...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: IB/isert: Rejects login PDUs that declare more data than was actually received. The isertloginrecvdone function records how many bytes the HCA actually places into the login buffer. However, nothing compares this value to the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: afunix: Do not use GC if MSGPEEK occurred. Igor Ushakov reported that GC purged the receive queue of a live socket due to a race with MSGPEEK, with a fix provided. This is exactly the same issue that was previously fixed in the...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-6.1, Linux-5.10

In the Linux kernel, the following vulnerabilities have been resolved: ima: Fixed a use-after-free issue related to the dname.name of a dentry. – dname.name can be changed during a rename operation, and the previous value can be freed. There are conditions that could potentially stabilize this...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async PF workqueue when vCPU is being destroyed Always flush the per-vCPU async PF workqueue when a vCPU is clearing its completion queue, for example, when a VM and all its vCPUs are being destroyed. KVM must...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: rtc: pcf8563: fix clock provider leak on unbind pcf8563clkoutregisterclk registers the CLKOUT clock provider with ofclkaddprovider, but nothing ever unwinds it: there is no ofclkdelprovider call and the driver has no remove...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free software available as a ready-to-run binary distribution or as source code that you can use, copy, modify, and distribute in both open and proprietary applications. In affected versions, Postscript files may be read and written when specifically excluded by a module policy in...

Astra Linux – vulnerability in openssh

OpenSSH versions prior to 10.3 may use unintended ECDSA algorithms. The listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted as meaning all ECDSA algorithms...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix checks for huge PMDs Patch series “userfaultfd: fix races around pmdtranshuge check”, v2. The pmdtranshuge code in mfillatomic is wrong in three different ways depending on kernel version: 1. The pmdtranshuge che...

Astra Linux – Vulnerability in Golang-1.19

Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/TLS clients, as well as servers that have Config.ClientAuth set to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Do not disable channels that are not enabled Mitigate the following issues: echo 1e789080.lpc-snoop /sys/bus/platform/drivers/aspeed-lpc-snoop/unbind ... 120.363594 Unable to handle kernel NULL pointer...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libceph: A potential out-of-bounds access has been fixed in crushdecode. A message of type CEPHMSGOSDMAP containing a crush map with at least one bucket contains two fields that store information related to the bucket’s algorithm...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do not recheck L1 intercepts when completing userspace I/O When completing the emulation of an instruction that generated a userspace exit for I/O, do not recheck L1 intercepts, as KVM has already finished that phase of...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: orangefs: Fix kmemleak in orangefskernel,clientdebuginit When inserting and removing the orangefs module, memory leaks occur as follows: unreferenced object 0xffff88816b0cc000 size 2048: comm "insmod", pid 783, jiffies 4294813439...