Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: handle forward allocation error The batadvdatforwarddata function calls pskbcopyforclone to duplicate an skb for each DHT candidate. However, it does not check the return value before passing it to the...

Astra Linux – Vulnerability in Samba

A null pointer dereference flaw was detected in Samba’s Winbind service in versions prior to 4.11.15, before 4.12.9, and before 4.13.1. A local user could exploit this flaw to crash the Winbind service, resulting in a denial of service...

Astra Linux – Vulnerability in SQLite3

The file ext/fts3/fts3snippet.c in SQLite before version 3.32.0 contains a NULL pointer dereferencing issue due to a malicious matchinfo query...

Astra Linux – Vulnerability in libgd2

In the gdImageClone function in gd.c within libgd version 2.1.0-rc2 to 2.2.5, there is a NULL pointer dereferencing issue that allows attackers to crash an application through a specific function call sequence. This issue only affects PHP when it is linked with an external libgd not included as...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83792d Fix NULL pointer dereference by removing unnecessary structure field If the driver reads val value sufficient for val & 0x08 && !val & 0x80 && val & 0x7 == val 4 & 0x7 from the device, then a NULL pointer dereferen...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix potential NULL dereference The bpfjitbinaryfree function requires a non-NULL argument. When the RISC-V BPF JIT fails to converge within NRJITITERATIONS steps, jitdata-header will be NULL, which triggers a NULL...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadataopen metadataopen returns NULL when kzallocobj fails, but the caller eractr only checks ISERRmd. Since ISERRNULL returns false, the NULL pointer is treated as a valid result and lat...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started selwriteload calls selinuxpolicycancel when selmakepolicynodes fails, and that helper dereferences the outgoing policy to cancel its sidtab conversion. On the first...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Bonding: Fix devconfall NULL dereference when IPv6 is disabled When booting with the ‘ipv6.disable=1’ parameter, devconfall is never initialized because inet6init exits before addrconfinit is called, which initializes it. However...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: myrs: Fixed a crash in the error case In myrsdetect, cs-disableintr is a NULL pointer when privdata-hwinit fails with a non-zero value. In this case, myrscleanupcs will attempt to dereference a NULL pointer, causing the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: tap: A NULL pointer dereference occurred in devparseheaderprotocol when skb-dev is null. This bug is triggered by the tap driver. When tapgetuser calls virtionethdrtoskb, skb-dev is null since skb-dev is set after the call t...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15

In net/tls/tlsmain.c within the Linux kernel up to version 6.2.6, dotlsgetsockopt lacks a locksock call, resulting in a race condition which can lead to use-after-free or NULL pointer dereferencing...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Skip wbsclsetscalerfilter if the filter is null. Callers can pass null as the filter value e.g., from the function wbsclgetfiltercoeffs16p, and a null check has been added to ensure that this does not occur...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can return NULL, and the pointer ‘function’ was dereferenced without checking for NULL. Add a check on the ‘function’ pointer in...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfdlookup fails, gtpencapenablesocket returns a NULL pointer; however, its callers only check for error pointers, thereby missing the NULL pointer case. The fix involves...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/client: fixed the null pointer dereference in drcmclientmodesetprobe. In drcmclientmodesetprobe, the return value of drmmodeduplicate is assigned to modeset-mode, which may lead to a NULL pointer dereference if drmmodeduplica...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Platform/mellanox: mlxbf-pmc – Check the result of ACPICOMPANION against NULL. Every platform driver may be forced to match a device that does not exist in its list of device IDs due to devicematchdriveroverride. Therefore,...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

A NULL pointer dereference flaw was found in the az6027 driver within drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not properly validated before being passed to the device. This flaw may allow a local user to crash the system or potentially cause a denial...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tipc: fixed a null-ptr-deref in tipctopsrvaccept The syzbot detected a crash in tipctopsrvaccept: - KASAN: Null-ptr-deref in range 0x0000000000000008-0x000000000000000f - Workqueue: tipcrcv in tipctopsrvaccept - RIP: 0010:...