Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fixed a NULL pointer dereference in the RX SA delete check. The qlachkedifrxsadeletepending function obtains the SCSI command via GETCMDSPsp and immediately dereferences cmd-scdatadirection. This command...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: dax: Reading daxdev-holderops once in daxholdernotifyfailure daxholdernotifyfailure reads daxdev-holderops twice without using READONCE. Once for the NULL check, and once for the indirect notifyfailure call. A concurrent...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Rejects non-VALID sessions in the compound request branch. The smb2checkusersession function takes a shortcut for any operation that is not the first in a COMPOUND request. It reuses the work-sess structure the session bou...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs. The function dwedmairqrequest passes the struct dwedmairq structure to requestirq, before dwedmachannelsetup fills the back pointer. As a result, a shared interrupt...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: platform/surface: acpi-notify: Check ACPI companion before use Since every platform driver may be forced to match a device that does not match its list of device IDs due to devicematchdriveroverride, platform drivers that rely on...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libceph: A potential nullptrderef issue has been prevented in cephhandleauthreply. If a message of type CEPHMSGAUTHREPLY contains a zero value for both protocol and result, this is currently not treated as an error. When...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fixed afunix nullptrderef in proto update unixstreamconnect sets skstate WRITEONCEsk-skstate, TCPESTABLISHED before it assigns a peer unixpeersk = newsk. skstate == TCPESTABLISHED makes sockmapskstateallowed believe...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: added a check for dmaalloccoherent A check for a failure with dmaalloccoherent has been added to prevent a potential dereferencing of a NULL pointer in dmahandlerx. Properly release DMA channels and the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: L2CAP: Fixed a nullptrderef issue in l2capsockstatechangecb. Added the same NULL guard that already exists in l2capsockresumecb and l2capsockreadycb...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Do not remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check the return value of sndctlnew1. sndctlnew1 may return NULL when memory allocation fails. sndes1938mixer does not check the return value before dereferencing the pointer, which can lead to a NULL pointer being...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: media: vidtv: Fixed a NULL pointer dereference in vidtvmuxpushsi. syzbot reported a general protection fault in vidtvpsitspsiwriteinto1. vidtvmuxgetpidctx may return NULL, but vidtvmuxpushsi does not check for this before...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ALSA: gus: check the return value of sndctlnew1 The sndctlnew1 function may return NULL when memory allocation fails. The sndgf1pcmvolumecontrol function does not check the return value before dereferencing kctl-id.index, whic...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fbdev: The fbnewmodelist function was fixed to prevent a nullptrderef in fbvideomodetovar. info-var, which represents the current mode of a framebuffer, is expected to have a matching entry in info-modelist. The vartodisplay...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: Stop OGMv2 on disabled interfaces When the batadvhardiface is disabled, its meshiface pointer is set to NULL. However, batadvvogmsendmeshif may still dispatch OGM messages via batadvvogmqueueonif for interfaces tha...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla – only unloads claims that have not yet been released. When the batadvblapurgeclaims function processes the list of claims, it only uses an rcureadlock to traverse the hash list. Due to potential parallel operatio...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/tunnel: Wait until all skuserdata readers complete before releasing the sock. There is a race condition in vxlan where, when deleting a vxlan device during packet reception, there is a possibility that the sock is released...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: mtk-pmic-keys – fixed the issue of possible null pointer dereferencing. In mtkpmickeysprobe, the regs parameter is only set if the button is parsed in the device tree. However, on hardware where the button is left floating...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: Fix potential null-ptr-deref in sparxstatsinit and sparx5start sparxstatsinit calls createsinglethreadworkqueue and does not check the ret value, which may return NULL. A null-ptr-deref may occur:...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix NULL pointer dereference during unbind race Commit b81ac4395bbe “usb: gadget: uvc: allow for application to cleanly shutdown” introduced two stages of synchronization waits totaling 1500ms in uvcfunctionunbi...