Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed NULL pointer dereferencing in bpftaskfromvpid. bpftaskfromvpid looks up a task in the pid namespace of the current task, via findtaskbyvpid: c findtaskbyvpidvpid findtaskbypidnsvpid, taskactivepidnscurrent...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fill the first free targets slot during auto-discovery Any invalid endpoint decoder pointer in the target array of an active region is not allowed by the cxl driver. This means that the cxl driver always assumes that...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: Rejects option groups without values. The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and provides only a recognized option name, such as “cachemode”, will...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: coresight: For the platform case, the connection counter is incremented until the allocation succeeds. The coresightaddoutconn function increments the nroutconns counter before calling devmkreallocarray, and again before...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fixed a possible nullptr case in the HWV cleanup/check process. The “probe” function should fail for power domains of the HWVOTER type. This driver unconditionally tried to perform cleanup operations on...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: AppArmor: Fixed a NULL pointer dereferencing in unpackpdb. pdb-dfa can become NULL if unpackdfa fails, resulting in a NULL pointer dereferencing...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fixed NULL pointer dereferencing in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. The fcpfindfcinterface function currently selects the first...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed a crash in bpfset|removedentryxattr for negative dentrys. The BPF kfuncs bpfsetdentryxattr and bpfremovedentryxattr attempt to lock the inode of the provided dentry without checking whether it is NULL. If a negative...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Rejected user command submissions without a command BO. The amdxdnadrmsubmitexecbuf function passes the user-supplied command BO handle directly into amdxdnacmdsubmit, with drvcmd == NULL. When the handle is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp – Check for page allocation failure correctly in TIO Sashiko notes: If snpallocfirmwarepages returns NULL under memory pressure, is it safe to pass it directly to pageaddress? On architectures without HASHEDPAGEVIRTUA...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Cancel SSR work items during PCI shutdown A reboot may cause the kernel to crash if it overlaps with the WLAN firmware’s recovery process SSR. The crash occurs due to a NULL pointer dereference in the MHI teardown...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hciqca – Fixed a NULL pointer dereferencing in qcadmphdr, for devices that are not serdev devices. For devices connected via non-serdev paths, hu-serdev is NULL. However, qcadmphdr dereferences...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skbclone in control TX The function t7xxportctrltx clones each skb fragment before passing it to the port transmit path. The cloning operation is used immediately to set cloned-len. Therefore, a failure in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: pfcp: Allocate per-cpu tstats for PFCP netdevs PFCP uses devgettstats64 as its ndogetstats64 callback. However, pfcplinksetup does not request NETDEVPCPUSTATTSTATS. As a result, the net core leaves dev-tstats as NULL for PFC...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: vmalloc: The issue of NULL pointer dereferencing in isvmareahugepages has been fixed. findvmarea may return NULL if the given address does not correspond to a valid vmalloc area. Check the return value before dereferencing it to...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Implement a reference counter for SRB The timeout handler and the done function are competing with each other. When qla2x00asynciocbtimeout starts to execute, it may be preempted by the normal response path via the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rtc: pl031: Fixed the issue of null pointer dereferencing in RTC features. When there is no interrupt line, the RTC alarm feature is disabled. The clearing of the alarm feature bit was performed before allocating the ldata-rtc...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: schhtb: Made htbdeactivate idempotent. Alan reported a NULL pointer dereference in htbnextrbnode after we made htbqlennotify idempotent. It turns out that in the following case, some regressions were introduced: htbdequeuetree...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: usb: dwc3-meson-g12a: Fixed an issue where the USB2 PHY glue initialization was performed when PHY0 was disabled. When only PHY1 is used for example, on Odroid-HC4, the regmap initialization code uses USB2 ports without...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skipping non-DP stream encoders for DP MST On DCE8-class ASICs e.g., Bonaire, the resource pool contains digital DIG stream encoders and one analog DAC encoder. When assigning a stream encoder for a secon...