Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since the KFD proc content has been moved to kernel debugfs, we cannot destroy KFD debugfs before kfdprocessdestroywq. Moving kfdprocessdestroywq prior to kfddebugfsfini fixes ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Check linkres-hpodplinkenc before using it. WHAT & HOW The functions dpenablelinkPhy and dpdisablelinkPhy can pass linkres without initializing hpodplinkenc. It is necessary to check for null values before...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: can: netlink: canchangelink: fixed the NULL pointer dereference of struct canpriv::dosetmode. Andrei Lalaev reported a NULL pointer dereference when a CAN device is restarted from a Bus Off state, and the driver does not implemen...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices The probe function is only used for the DP83822 PHY; the private data pointer remains uninitialized for the smaller DP83825/26 models. While all uses of the...

Astra Linux – Vulnerability in libjpeg-turbo

Libjpeg-turbo 1.5.2 has a NULL Pointer Dereference issue in files jdpostct.c and jquant1.c, due to a malicious JPEG file...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: Fix possible NULL dereference in sndac97mixer smatch error: sound/pci/ac97/ac97codec.c:2354 sndac97mixer error: We previously assumed ‘rac97’ could be null see line 2072 Remove redundant assignment; return an error if...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadataopen metadataopen returns NULL when kzallocobj fails, but the caller eractr only checks ISERRmd. Since ISERRNULL returns false, the NULL pointer is treated as a valid result and lat...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nullblk: reject per-device queue resize for shared tag set When sharedtags is enabled, nullsetuptagset causes the device to use the global tagset, whose driverdata remains NULL. Consequently, nullmapqueues falls back to the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: added a check for dmaalloccoherent A check for a failure with dmaalloccoherent has been added to prevent a potential dereferencing of a NULL pointer in dmahandlerx. Properly release DMA channels and the...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: add ioremap return check and cleanup Add a check for the return value of pciioremapbar in cx23885devsetup. If ioremap for BAR0 fails, release the already allocated PCI memory region, decrement the device count, an...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afsgettree afsallocsbi uses kzalloc for memory allocation. And, if ctx-dynroot is not null, as-cell and as-volume are null. In traceafsgettree they are dereferenced. KASAN error message: KASAN...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing the slab cache frees all znodes in memory and sets c-zroot.znode to NULL; subsequently, dumping the tnc tree accesses c-zroot.znode, leading to a null pointer dereference...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: armffa: A NULL dereference in ffapartitioninfoget was fixed. The ffapartitioninfoget function passes uuidstr directly to uuidParse, without a NULL check. When a NULL value is passed as an argument, uuidParse calls...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmfcpreinitdcmds This patch fixes a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of strsep in...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add check for kmemdup Since kmemdup may return a NULL pointer, it is better to add a check on its return value to prevent NULL pointer dereferencing...

Astra Linux – vulnerability in nasm

In libnasm.a within Netwide Assembler NASM 2.14.xx, asm/pragma.c permits a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when “%pragma limit” is mishandled...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference In cdnsmhdpatomicenable, the return value of drmmodeduplicate is assigned to mhdpstate-currentmode, and there is a dereference of it in drmmodesetname, which will...

Astra Linux – vulnerability in libmysofa

Improper handling of input data in the verifyAttribute function within the libmysofa library versions 0.5 through 1.1 can result in a NULL pointer dereference and segmentation fault, either due to strict memory protection or due to overwriting a near-NULL pointer when memory restrictions are abse...

Astra Linux – vulnerability in Heimdal

Heimdal prior to version 7.7.1 allows attackers to trigger a NULL pointer dereference in an SPNEGO acceptor by setting preferredmechtype to GSSCNOOID and using a non-zero initialresponse value for sendaccept...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fixed a race condition during reboot During system reboot, cpufreqsuspend is called via the kernelrestart - deviceshutdown path. Unlike the normal system suspend path, the reboot path does not call freezeprocesses, so...