Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadataopen metadataopen returns NULL when kzallocobj fails, but the caller eractr only checks ISERRmd. Since ISERRNULL returns false, the NULL pointer is treated as a valid result and lat...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nfsd: Block non-SAVEFH operations after FOREIGN PUTFH to prevent NULL deref When CONFIGNFSDV42INTERSSC is enabled, nfsd4putfh can return success even when fhdentry and fhexport are both NULL, provided that fhverify returns...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems, the configuration space is too large to be ioremaped all at once; thus, pciecamcreate maps each bus segment separately and relies on the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-after-free in gadgetmatchdriver The udc structure serves as the management structure for the gadget, but their lifecycle is decoupled. A race condition exists where usbdelgadget frees the udc memory e.g....

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If “dmkvzallocpercpuallocsize, cputonodecpu” fails, the code jumps to the “out” label and calls dmstatfree. dmstatfree does “foreachpossiblecpucpu...

Expat development team Expat improper exception handling vulnerability

The Expat development team identified a vulnerability related to improper exception handling in Expat versions 2.9.0 and earlier. This vulnerability stems from improper handling of the XMLTOKNONE token generated by the externalEntityInitProcessor2 function in lib/xmlparse.c when encountering empt...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.8. It stems from a race condition between watchqueuesetsize and postonenotification, which can lead to dereferencing when notes remain NULL. This may result in null pointer dereferencing and kernel crashes...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.15. It arises when KVM nVMX fails to reset the vCPU’s MMU pointer back to its root MMU upon loading L2 state in non-VM-Entry scenarios; this may result in null pointer dereferencing...

Improper handling of exceptions in Tanium Enforce

Versions prior to Tanium Enforce 2.9.736, versions prior to 2.10.778, and versions prior to 3.0.373 contain an improper exception handling vulnerability. This vulnerability stems from null pointer dereferencing and may lead to denial-of-service attacks...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions from 6.18.53 up to 6.18.57 and from 7.2.7 up to 7.2.11. These vulnerabilities arise when kernel page tables are delayed during bootup; the work queue is not yet initialized, potentially leading to null pointer dereferencing and kernel crashe...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.5. It arises because the V3D unbind process fails to clear suspend check timers and work queues; this may allow reading V3D registers via an empty vc4-v3d pointer, leading to null pointer dereferencing and use-after-free conditions...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions from 4.4.281 up to 4.5, from 4.9.280 up to 4.10, from 4.14.244 up to 4.15, from 4.19.203 up to 4.20, from 5.4.140 up to 5.5, from 5.10.58 up to 5.11, from 5.13.10 up to 5.14, and specifically in version 5.14. The vulnerability arises because...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.8. It stems from improper rejection of automatic mounts under mount points that are not owned by the caller. countmounts dereferences an invalid pointer within MNTNSINTERNAL, potentially leading to null pointer dereferencing and a kernel...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 7.2.9. It stems from the lack of checks on empty stream-sink values within the DPMS sequence before dereferencing, potentially leading to null pointer dereferencing...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises from the failure to disable VLPI when ITS is not detected. When the setting vmnicgicv4enable=1 is incorrectly configured on systems lacking MSI...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.12. It arises because, after checking the number of paths in fibnlmsgsize, fibinfonhc fails to handle the case where RTMNEWNEXTHOP reduces the path count; this results in a NULL return value, potentially leading to null pointer dereferenci...

HarfBuzz: Improper exception handling vulnerability

The HarfBuzz version 8.0.0 to 14.6.0 has a vulnerability related to improper exception handling. This vulnerability arises from experimental WebAssembly shaper hosts that import buffersetcontents, facecreate, and fontsetcoords functions. Null pointer dereferencing occurs in these functions,...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd When a device is attached to a PM domain via genpddevpmattachbyid, genpd calls pmruntimeenable for the corresponding virtual device it registers. Although this...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference if a malicio...

IBM MQ Operator deserialization injection vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 pre-versions, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, and 4.0.0 through 4.0.4 have a deserialization injection vulnerability. This vulnerabilit...