Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: tap: A NULL pointer dereference occurred in devparseheaderprotocol when skb-dev is null. This bug is triggered by the tap driver. When tapgetuser calls virtionethdrtoskb, skb-dev is null since skb-dev is set after the call t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add a NULL check in wledconfigure. The devmkasprintf function returns NULL when memory allocation fails. Currently, wledconfigure does not check for this case, resulting in a NULL pointer being dereferenced. Ad...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mptcp: fixed TCP options overflow. Syzbot reported the following errors: Oops: general protection fault, likely due to a non-canonical address 0xdffffc0000000001: 0000 1 PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mtd: lpddr2nvm: Fixed a possible null-ptr-deref issue. This issue could lead to a null-ptr-deref when the resourcesizeaddrange function is called, if the platformgetresource function returns NULL...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fixed afunix nullptrderef in proto update unixstreamconnect sets skstate WRITEONCEsk-skstate, TCPESTABLISHED before it assigns a peer unixpeersk = newsk. skstate == TCPESTABLISHED makes sockmapskstateallowed believe...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: mana: Added NULL guards in the teardown process to prevent panics during attach failures. When queue allocation fails halfway through, error cleanup releases variables apc-txqp and apc-rxqs containing NULL values. Multipl...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/mxsfb: Disabling the overlay plane in mxsfbplaneoverlayatomicdisable When disabling the overlay plane in mxsfbplaneoverlayatomicupdate, the framebuffer pointer of the overlay plane is NULL. Therefore, dereferencing it would...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs. The function dwedmairqrequest passes the struct dwedmairq structure to requestirq, before dwedmachannelsetup fills the back pointer. As a result, a shared interrupt...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Do not remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi – Set the driver data before use. The psxpadspisuspend function retrieves the controller state using spigetdrvdata, but the probe never stores this state. As a result, the suspend function dereferences a NULL...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fixed a NULL pointer dereference in the RX SA delete check. The qlachkedifrxsadeletepending function obtains the SCSI command via GETCMDSPsp and immediately dereferences cmd-scdatadirection. This command...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: platform/surface: acpi-notify: Check ACPI companion before use Since every platform driver may be forced to match a device that does not match its list of device IDs due to devicematchdriveroverride, platform drivers that rely on...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/client: fixed the null pointer dereference in drcmclientmodesetprobe. In drcmclientmodesetprobe, the return value of drmmodeduplicate is assigned to modeset-mode, which may lead to a NULL pointer dereference if drmmodeduplica...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ipmi: Fixed a NULL pointer dereferencing after a failed registration. The trysmiinit function allocates newsmi-sism and subsequently calls ipmiregistersmimod, which corresponds to ipmiaddsmi. During ipmiaddsmi, the upper IPMI...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: fixed the null-ptr-deref issue in hugetlbfsParseParam Syzkaller reported a null-ptr-deref bug as follows: ====================================================== KASAN: null-ptr-deref in range...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath11k: A NULL pointer dereference occurred in ath11khalsrngaccessbegin. In ATH11KQMIEVENTFWREADY, the field ATH11KFLAGREGISTERED is set unconditionally, even when ath11kcoreqmifirmwareready fails. This leaves the driver in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ALSA: gus: check the return value of sndctlnew1 The sndctlnew1 function may return NULL when memory allocation fails. The sndgf1pcmvolumecontrol function does not check the return value before dereferencing kctl-id.index, whic...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/tunnel: Wait until all skuserdata readers complete before releasing the sock. There is a race condition in vxlan where, when deleting a vxlan device during packet reception, there is a possibility that the sock is released...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers. The basereleasememorypools function frees every ioc-pciesglookup entry unconditionally. This includes those entries that were never allocated during the setup loop, even...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: dax: Reading daxdev-holderops once in daxholdernotifyfailure daxholdernotifyfailure reads daxdev-holderops twice without using READONCE. Once for the NULL check, and once for the indirect notifyfailure call. A concurrent...