Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadataopen metadataopen returns NULL when kzallocobj fails, but the caller eractr only checks ISERRmd. Since ISERRNULL returns false, the NULL pointer is treated as a valid result and lat...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems, the configuration space is too large to be ioremaped all at once; thus, pciecamcreate maps each bus segment separately and relies on the...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: bpf: checkcondjmpop: properly infer if register is null Nicholas Carlini reported a bug wherein the verifier incorrectly infers that a pointer is non-null. The bug occurs when two pointers are compared, and one of them has a type...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nfsd: Block non-SAVEFH operations after FOREIGN PUTFH to prevent NULL deref When CONFIGNFSDV42INTERSSC is enabled, nfsd4putfh can return success even when fhdentry and fhexport are both NULL, provided that fhverify returns...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If “dmkvzallocpercpuallocsize, cputonodecpu” fails, the code jumps to the “out” label and calls dmstatfree. dmstatfree does “foreachpossiblecpucpu...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-after-free in gadgetmatchdriver The udc structure serves as the management structure for the gadget, but their lifecycle is decoupled. A race condition exists where usbdelgadget frees the udc memory e.g....

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: spi: Added a NULL check for spigetdeviceid in spigetdevicematchdata This prevents NULL pointer dereferencing when spigetdeviceid returns NULL, which may occur when using driveroverride without an associated SPI ID entry...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 2.6.18. It stems from iscsicompletepdu in libuscsi failing to verify whether the task specified in the management response is actually running and is not a SCSI command. This may lead to null pointer dereferencing and kernel crashes...

Expat development team Expat improper exception handling vulnerability

The Expat development team identified a vulnerability related to improper exception handling in Expat versions 2.9.0 and earlier. This vulnerability stems from improper handling of the XMLTOKNONE token generated by the externalEntityInitProcessor2 function in lib/xmlparse.c when encountering empt...

Linux kernel security vulnerabilities

The Linux kernel contains a security vulnerability stemming from libuscsi’s failure to validate reflected ITT in Reject PDUs. This may lead to null pointer dereferencing and a reference count underflow, potentially causing ongoing SCSI commands to be treated as successful...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.15. It arises when KVM nVMX fails to reset the vCPU’s MMU pointer back to its root MMU upon loading L2 state in non-VM-Entry scenarios; this may result in null pointer dereferencing...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.8. It stems from a race condition between watchqueuesetsize and postonenotification, which can lead to dereferencing when notes remain NULL. This may result in null pointer dereferencing and kernel crashes...

Improper handling of exceptions in Tanium Enforce

Versions prior to Tanium Enforce 2.9.736, versions prior to 2.10.778, and versions prior to 3.0.373 contain an improper exception handling vulnerability. This vulnerability stems from null pointer dereferencing and may lead to denial-of-service attacks...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.5. It arises because the V3D unbind process fails to clear suspend check timers and work queues; this may allow reading V3D registers via an empty vc4-v3d pointer, leading to null pointer dereferencing and use-after-free conditions...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions from 6.18.53 up to 6.18.57 and from 7.2.7 up to 7.2.11. These vulnerabilities arise when kernel page tables are delayed during bootup; the work queue is not yet initialized, potentially leading to null pointer dereferencing and kernel crashe...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions from 4.4.281 up to 4.5, from 4.9.280 up to 4.10, from 4.14.244 up to 4.15, from 4.19.203 up to 4.20, from 5.4.140 up to 5.5, from 5.10.58 up to 5.11, from 5.13.10 up to 5.14, and specifically in version 5.14. The vulnerability arises because...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.8. It stems from improper rejection of automatic mounts under mount points that are not owned by the caller. countmounts dereferences an invalid pointer within MNTNSINTERNAL, potentially leading to null pointer dereferencing and a kernel...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises from the failure to disable VLPI when ITS is not detected. When the setting vmnicgicv4enable=1 is incorrectly configured on systems lacking MSI...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 7.2.9. It stems from the lack of checks on empty stream-sink values within the DPMS sequence before dereferencing, potentially leading to null pointer dereferencing...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.12. It arises because, after checking the number of paths in fibnlmsgsize, fibinfonhc fails to handle the case where RTMNEWNEXTHOP reduces the path count; this results in a NULL return value, potentially leading to null pointer dereferenci...