Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7996 – A possible NULL pointer dereferencing has been fixed in mt7996macwritetxwi80211. For injected frames e.g., via Radiotap, mac80211 can set info-control.vif = NULL, as explicitly stated in the struct...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: afs: The setting of ASRELEASEALWAYS for symlinks and mountpoints has been removed. Regular AFS files correctly use afsfileaops, which sets releasefolio as netfsreleasefolio. Therefore, ASRELEASEALWAYS is valid for them when fscac...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skbclone in control TX The function t7xxportctrltx clones each skb fragment before passing it to the port transmit path. The cloning operation is used immediately to set cloned-len. Therefore, a failure in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: pfcp: Allocate per-cpu tstats for PFCP netdevs PFCP uses devgettstats64 as its ndogetstats64 callback. However, pfcplinksetup does not request NETDEVPCPUSTATTSTATS. As a result, the net core leaves dev-tstats as NULL for PFC...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hciqca – Fixed a NULL pointer dereferencing in qcadmphdr, for devices that are not serdev devices. For devices connected via non-serdev paths, hu-serdev is NULL. However, qcadmphdr dereferences...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fixed NULL pointer dereferencing in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. The fcpfindfcinterface function currently selects the first...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: A NULL pointer dereference occurred in xeptzapptesentry. The page-table walk framework might pass a NULL child pointer for unpopulated entries. The xeptzapptesentry function calls containerofchild before checking for...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: qcom: q6apm: fixed a NULL pointer dereferencing in graphcallback. When q6apmfreefragments is called, it frees rxdata.buf/txdata.buf and sets them to NULL under graph-lock. A late DSP buffer-done response can cause issues...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: coresight: For the platform case, the connection counter is incremented until the allocation succeeds. The coresightaddoutconn function increments the nroutconns counter before calling devmkreallocarray, and again before...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skipping non-DP stream encoders for DP MST On DCE8-class ASICs e.g., Bonaire, the resource pool contains digital DIG stream encoders and one analog DAC encoder. When assigning a stream encoder for a secon...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftfib: A fib expression in the netdev egress hook is rejected. A fib expression in the netdev egress base chain dereferences nftinpkt on the transmit path, resulting in a NULL pointer dereference during evaluation...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Added a NULL check for osb-journal in ocfs2checkpoint inode. During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts the remaining cached inodes, the calls to ocfs2evict...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fixed a NULL pointer dereference in pnfsmarkmatchinglsegsreturn. The commit de144ff4234f fixes the issue by changing pnfsreturnlayout to call pnfsmarkmatchinglsegsreturn, with NULL passed as the argument to the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mm: kmem: fixed a NULL pointer dereference in objstockflushrequired KCSAN identified an issue in objstockFlushRequired: stock-cachedobjcg can be reset between the check and dereference...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fixed a null-point-dereference issue in fmtsinglename. Check the return value of devmkstrdup in case of null-point-dereference...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: common: usb-conn-gpio: Fixed the issue of NULL pointer dereferencing during the charger process. When the system is powered on using an OTG cable, the IDDIG interrupt occurs before the charger is registered. This can lead to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sock in isoconnectind Accessing iso.pisock-conn requires locksock, which is not set in the "ev3" part of isoconnectind. It may also be NULL if the socket has transitioned away from the LISTEN/CONNECT states...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Cancel SSR work items during PCI shutdown A reboot may cause the kernel to crash if it overlaps with the WLAN firmware’s recovery process SSR. The crash occurs due to a NULL pointer dereference in the MHI teardown...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fixed a NULL pointer dereferencing in qcasetup, which occurred for non-serdev devices. For devices connected via non-serdev paths, hu-serdev is NULL. However, qcasetup serdevdevicegetdrvdatahu-serdev and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed the handling of ACKALL packets. The rxrpcinputackall function accepts ACKALL packets without checking whether the call is in a state where outstanding transmit buffers exist. Therefore, a forged ACKALL packet can...