Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add check for kmemdup Since kmemdup may return a NULL pointer, it is better to add a check on its return value to prevent NULL pointer dereferencing...

Astra Linux – vulnerability in nasm

In libnasm.a within Netwide Assembler NASM 2.14.xx, asm/pragma.c permits a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when “%pragma limit” is mishandled...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference In cdnsmhdpatomicenable, the return value of drmmodeduplicate is assigned to mhdpstate-currentmode, and there is a dereference of it in drmmodesetname, which will...

Astra Linux – vulnerability in libmysofa

Improper handling of input data in the verifyAttribute function within the libmysofa library versions 0.5 through 1.1 can result in a NULL pointer dereference and segmentation fault, either due to strict memory protection or due to overwriting a near-NULL pointer when memory restrictions are abse...

Astra Linux – vulnerability in Heimdal

Heimdal prior to version 7.7.1 allows attackers to trigger a NULL pointer dereference in an SPNEGO acceptor by setting preferredmechtype to GSSCNOOID and using a non-zero initialresponse value for sendaccept...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in activeinstance Avoid returning &node-base when node is NULL due to OOM during GFPATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry picked...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in in6devstatsget devgetbyindexrcu could return NULL if the original physical device is unregistered. Found by Sashiko...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fixed the broken error propagation in agpamd64probe. A NULL pointer dereference was observed in the AMD64 AGP driver when running in a virtualized environment e.g., qemu/kvm without a physical AMD northbridge. The cras...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ata: patapxa: Fix potential NULL pointer dereference in pxaataprobe devmioremap returns NULL on error. Currently, pxaataprobe does not check for this case, which can result in a NULL pointer dereference. Add a NULL check after...

Astra Linux – vulnerability in linux-5.10, linux

A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sltxtimeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information...

Astra Linux – Vulnerability in libde265

It was discovered that libde265 v1.0.10 contains a NULL pointer dereferencing in the ffhevcputweightedpredavg8sse function located at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack through a crafted input file...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer dmadev was being dereferenced before ensuring that cdnsctrl-dmac is properly initialized. Move the assignment of dmadev after successfully...

Astra Linux – vulnerability in linux-5.10, linux

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM Do not call snddmafreepages when snddmaallocpages returns -ENOMEM because this leads to a NULL pointer dereference bug. The dmesg output is as follows: T1387...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: “fou”: fixed the initialization of grc. Grc must be initialized first. There may be a situation where if fou is NULL, “goto out” will be executed, and grc will be used in an uninitialized state...

Astra Linux – Vulnerability in krb5

In kdc/kdcpreauthec.c of the Key Distribution Center KDC in MIT Kerberos 5 also known as krb5, before versions 1.18.4 and 1.19.x, and before version 1.19.2, remote attackers could exploit a vulnerability that led to a NULL pointer dereferencing and a crash of the daemon. This occurs because the...

Astra Linux – vulnerability in libde265

It has been discovered that libde265 v1.0.10 contains a NULL pointer dereference in the ffhevcputunweightedpred8sse function within sse-motion.cc. This vulnerability enables attackers to trigger a Denial of Service DoS condition by providing a specially crafted input file...

Astra Linux – vulnerability in libde265

It has been discovered that libde265 v1.0.10 contains a NULL pointer dereference in the ffhevcputweightedpredavg8sse function located at sse-motion.cc. This vulnerability enables attackers to trigger a Denial of Service DoS condition by providing a specially crafted input file...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htblookupleaf encounters an empty rbtree htblookupleaf contains a BUGON that can be triggered by the following commands: tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc cla...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: reset: uniphier-glue: Fix possible null-ptr-deref It will cause a null-ptr-deref when resourcesizeres is invoked, if platformgetresource returns NULL...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 A new request from KMD/VBIOS to support a new UMA carving model. This fixes a null dereference caused by accessing Ctx-dcbios-integratedinfo when it was NULL. DAL parses...