Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: “Bluetooth: btsdio: fix use after free bug in btsdioRemove due to unfinished work” This issue has been resolved through commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f. This patch may introduce a potential null-ptr-def problem...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: The duplicate attr inode dirty marking action has been removed. Syzbot reported a null-ptr-deref issue in 1. If the attributes file is not loaded during system mounting, a trigger occurs when setxattr is executed in...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/panel: ili9341: fix optional regulator handling If the optional regulator lookup fails, reset the pointer to NULL. Other functions such as mipidbipoweronconditional only perform a NULL pointer check; otherwise, they will...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Implement a reference counter for SRB The timeout handler and the done function are competing with each other. When qla2x00asynciocbtimeout starts to execute, it may be preempted by the normal response path via the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Staging: vchiqarm: Avoid dereferencing a NULL pointer in vchiqdumpplatforminstances. vchiqgetstate may return a NULL pointer. Therefore, handle this case and avoid dereferencing a NULL pointer in vchiqdumpplatforminstances...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: xsk: Fixed a race condition in socket teardown Fixed a race condition in the xsk socket teardown code that could lead to a NULL pointer dereferencing. The current xskunbindcode in xskunbinddev starts by setting xs-state to...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: octeontx2 – remove the CONFIGDMCRYPT check No issues were found when using the driver with dm-crypt enabled. Therefore, the CONFIGDMCRYPT check in the driver can be removed. This also fixes the NULL pointer dereference...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: vmalloc: The issue of NULL pointer dereferencing in isvmareahugepages has been fixed. findvmarea may return NULL if the given address does not correspond to a valid vmalloc area. Check the return value before dereferencing it to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/sched: schdualpi2: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever dualpi2 drops packets during the peek operation, it calls qdisctreereducebacklog. A problem arises because it calls...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/vmwgfx: Avoid calling destroyworkqueueNULL in case of vkms initialization failures. There are two possible paths through vmwvkmsinit that may result in vmw-crcworkq being set to NULL, while still leaving the rest of the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fill the first free targets slot during auto-discovery Any invalid endpoint decoder pointer in the target array of an active region is not allowed by the cxl driver. This means that the cxl driver always assumes that...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Command submissions are rejected on devices that do not have a submit operation. The amdxdnacmdsubmit function calls xdna-devinfo-ops-cmdsubmit unconditionally, but only the ai2devops define that callback. The...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Rejected user command submissions without a command BO. The amdxdnadrmsubmitexecbuf function passes the user-supplied command BO handle directly into amdxdnacmdsubmit, with drvcmd == NULL. When the handle is...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NPD when the ASIC does not support DMUB ctx-dmubsrv will be freed if the ASIC does not support DMUB, which is tested in dmdmubswinit. However, it will be freed in dmubHWLockmgrCmd if shouldusedmubLock retur...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ovl: Null pointer dereference was fixed in ovlpermission. The related processes are as follows: pathlookupat, linkpathwalk, inodepermission, ovlpermission, ovlipathrealinode, &realpath, path-dentry = ovlidentryupperinode,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: uprobes: Fixed a NULL pointer dereference in hprobeexpire. Forking a task that has a pending uretprobe can lead to an error in the kernel, involving a NULL pointer dereference in the clone function path: - Bug: NULL pointer...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: mt76: mt7921: fixed the error code “return” in “mt7921acpiread”. The kernel NULL pointer was dereferenced when the ACPI SAR table was not properly implemented. Fixed the error code “return” to indicate that the ACPI SAR...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tpmcrb: Add a check for ACPICOMPANION against NULL during the probe. Every platform driver can be forced to match a device that does not match its list of device IDs due to devicematchdriveroverride. Therefore, platform drivers...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dma-buf: dma-fence: Fixed potential NULL pointer dereferencing issues. The commit mentioned in the fixes section introduced a mechanism through which fence producers can be fully decoupled from fence consumers. This desirable...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fixed NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline. However, the BO remains in the client’s object list until userspace explicitly closes the GEM handle. If memory...