Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dma-fence: Fixed the potential issue of dereferencing a null pointer in tracedmafinesignaled, tracedmafinewaitend, and tracedmafinedestroy. After the fence signalling is reset, a null fence-ops pointer may be dereferenced. We...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: pfcp: Allocate per-cpu tstats for PFCP netdevs PFCP uses devgettstats64 as its ndogetstats64 callback. However, pfcplinksetup does not request NETDEVPCPUSTATTSTATS. As a result, the net core leaves dev-tstats as NULL for PFC...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed the handling of ACKALL packets. The rxrpcinputackall function accepts ACKALL packets without checking whether the call is in a state where outstanding transmit buffers exist. Therefore, a forged ACKALL packet can...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: A NULL pointer dereference occurred in xeptzapptesentry. The page-table walk framework might pass a NULL child pointer for unpopulated entries. The xeptzapptesentry function calls containerofchild before checking for...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dm-verity: fixed a possible NULL pointer dereferencing issue. Fixed a possible NULL pointer dereferencing in dmverityloadpinisbdevtrusted if the device does not have a table...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel the hrtimer before clearing the slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending interrupt might have already started the hrtimer i2cimxslavetimeo...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: Rejects option groups without values. The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and provides only a recognized option name, such as “cachemode”, will...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Initialize reid before removing the registration. The rpcrdmacreateid function registers ep-rern with the rbclient, before returning the new rdmacmid to rpcrdmaepcreate. However, rpcrdmaepcreate currently stores that...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: btrfs: Skip global block reserve accounting for rescue mounts BUG Mounting with rescue=ibadroots after corrupting the block group tree triggers a NULL pointer dereference: - BUG: Kernel NULL pointer dereference, address:...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: skmsg: Fixed the incorrect last sg check in skmsgrecvmsg. Also, one instance of a kernel NULL pointer dereferencing was fixed as follows: 224.462334 Call Trace: 224.462394 tcpbpfrecvmsg+0xd3/0x380 224.462441 ? sockhasperm+0x78/0x...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fixed the publication race in priv-channelstats. The mlx5echannelstatsalloc function publishes a new entry to priv-channelstats, and then increments priv-statsnch as a publication token. However, neither operation...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed NULL pointer dereferencing in bpftaskfromvpid. bpftaskfromvpid looks up a task in the pid namespace of the current task, via findtaskbyvpid: c findtaskbyvpidvpid findtaskbypidnsvpid, taskactivepidnscurrent...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: uprobes: Fixed a NULL pointer dereference in hprobeexpire. Forking a task that has a pending uretprobe can lead to an error in the kernel, involving a NULL pointer dereference in the clone function path: - Bug: NULL pointer...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skbclone in control TX The function t7xxportctrltx clones each skb fragment before passing it to the port transmit path. The cloning operation is used immediately to set cloned-len. Therefore, a failure in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fixed a NULL pointer dereferencing in qcasetup, which occurred for non-serdev devices. For devices connected via non-serdev paths, hu-serdev is NULL. However, qcasetup serdevdevicegetdrvdatahu-serdev and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Invalid indirect BO handle is rejected during indirect CSD setup. The function v3dgetcpuindirectcsdparams looks up the indirect buffer object from a handle provided by the user space. However, it never checks the result....

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rtc: pl031: Fixed the issue of null pointer dereferencing in RTC features. When there is no interrupt line, the RTC alarm feature is disabled. The clearing of the alarm feature bit was performed before allocating the ldata-rtc...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: octeontx2 – remove the CONFIGDMCRYPT check No issues were found when using the driver with dm-crypt enabled. Therefore, the CONFIGDMCRYPT check in the driver can be removed. This also fixes the NULL pointer dereference...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Added a NULL check for osb-journal in ocfs2checkpoint inode. During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts the remaining cached inodes, the calls to ocfs2evict...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tpmcrb: Add a check for ACPICOMPANION against NULL during the probe. Every platform driver can be forced to match a device that does not match its list of device IDs due to devicematchdriveroverride. Therefore, platform drivers...