Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skbclone in control TX The function t7xxportctrltx clones each skb fragment before passing it to the port transmit path. The cloning operation is used immediately to set cloned-len. Therefore, a failure in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tpmcrb: Add a check for ACPICOMPANION against NULL during the probe. Every platform driver can be forced to match a device that does not match its list of device IDs due to devicematchdriveroverride. Therefore, platform drivers...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dma-buf: dma-fence: Fixed potential NULL pointer dereferencing issues. The commit mentioned in the fixes section introduced a mechanism through which fence producers can be fully decoupled from fence consumers. This desirable...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dma-fence: Fixed the potential issue of dereferencing a null pointer in tracedmafinesignaled, tracedmafinewaitend, and tracedmafinedestroy. After the fence signalling is reset, a null fence-ops pointer may be dereferenced. We...

Astra Linux – Vulnerability in Linux, Linux 5.10

A flaw was discovered in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: skmsg: Fixed the incorrect last sg check in skmsgrecvmsg. Also, one instance of a kernel NULL pointer dereferencing was fixed as follows: 224.462334 Call Trace: 224.462394 tcpbpfrecvmsg+0xd3/0x380 224.462441 ? sockhasperm+0x78/0x...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fixed a NULL pointer dereferencing in qcasetup, which occurred for non-serdev devices. For devices connected via non-serdev paths, hu-serdev is NULL. However, qcasetup serdevdevicegetdrvdatahu-serdev and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: The duplicate attr inode dirty marking action has been removed. Syzbot reported a null-ptr-deref issue in 1. If the attributes file is not loaded during system mounting, a trigger occurs when setxattr is executed in...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: octeontx2 – remove the CONFIGDMCRYPT check No issues were found when using the driver with dm-crypt enabled. Therefore, the CONFIGDMCRYPT check in the driver can be removed. This also fixes the NULL pointer dereference...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Added a NULL check for osb-journal in ocfs2checkpoint inode. During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts the remaining cached inodes, the calls to ocfs2evict...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel the hrtimer before clearing the slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending interrupt might have already started the hrtimer i2cimxslavetimeo...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: bitland-mifs-wmi: Fixed the issue of NULL pointer dereferencing during suspend/resume operations. The driver registers two distinct WMI devices: a control device BITLANDWMICONTROL and an event device BITLANDWMIEVENT...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: pfcp: Allocate per-cpu tstats for PFCP netdevs PFCP uses devgettstats64 as its ndogetstats64 callback. However, pfcplinksetup does not request NETDEVPCPUSTATTSTATS. As a result, the net core leaves dev-tstats as NULL for PFC...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: coresight: For the platform case, the connection counter is incremented until the allocation succeeds. The coresightaddoutconn function increments the nroutconns counter before calling devmkreallocarray, and again before...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/vmwgfx: Avoid calling destroyworkqueueNULL in case of vkms initialization failures. There are two possible paths through vmwvkmsinit that may result in vmw-crcworkq being set to NULL, while still leaving the rest of the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fixed NULL pointer dereferencing in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. The fcpfindfcinterface function currently selects the first...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: A NULL pointer dereference occurred in xeptzapptesentry. The page-table walk framework might pass a NULL child pointer for unpopulated entries. The xeptzapptesentry function calls containerofchild before checking for...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7996 – A possible NULL pointer dereferencing has been fixed in mt7996macwritetxwi80211. For injected frames e.g., via Radiotap, mac80211 can set info-control.vif = NULL, as explicitly stated in the struct...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: afs: The setting of ASRELEASEALWAYS for symlinks and mountpoints has been removed. Regular AFS files correctly use afsfileaops, which sets releasefolio as netfsreleasefolio. Therefore, ASRELEASEALWAYS is valid for them when fscac...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fixed NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline. However, the BO remains in the client’s object list until userspace explicitly closes the GEM handle. If memory...