Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: fix corruption during on-line resize We observed a corruption during on-line resize of a file system larger than 16 TiB using a 4k block size. Since there are more than 2^32 blocks, resizeinode is disabled by default via...

Astra Linux – vulnerability in libtasn1-6

GNU Libtasn1 versions prior to 4.19.0 contain an off-by-one array size check for ETYPEOK that affects asn1encodesimpleder...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nvsuspend and nvresume walk the non-PCI configuration space using for i = 0; i registersize/sizeofu32; i++ which results in one extra iteration. savedconfigspac...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: can: netlink: canchangelink: fixed the NULL pointer dereference of struct canpriv::dosetmode. Andrei Lalaev reported a NULL pointer dereference when a CAN device is restarted from a Bus Off state, and the driver does not implemen...

Astra Linux – Vulnerability in Zabbix

The researcher has shown that due to the way the SNMP trap log is parsed, an attacker can create an SNMP trap with additional lines of information, causing forged data to appear in the Zabbix UI. This attack requires that SNMP authentication be disabled, and/or that the attacker knows the...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. There is an “off-by-one” error in the bounds check for the PKCS12 bag element. This vulnerability allows a remote attacker to write beyond the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could le...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: iavf: fix off-by-one issues in iavfconfigrssreg There are off-by-one bugs when configuring RSS hash key and lookup table, causing out-of-bounds reads to memory 1 and out-of-bounds writes to device registers. Before commit...

Astra Linux – Vulnerability in Chromium

A single error in V8 in Google Chrome prior to version 141.0.7390.54 allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in VF setupnicdevices cleanup In setupnicdevices, the initialization loop jumps to the label setupnicdevfree on failure. The current cleanup loop whilei-- skips the failing index i, resulting i...

Astra Linux – vulnerability in NTP

NTPD in NTP prior to versions 4.2.8p14 and 4.3.x prior to version 4.3.100 allows an off-path attacker to block unauthenticated synchronization by sending a server-mode packet with a spoofed source IP address; this happens because transmissions are rescheduled even when the packet lacks a valid...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: iwlwifi: mvm – fixed an issue where the TXF key sanitizer function had an off-by-one error. iwlmvmfrobtxfkeyiter tracks the last matched byte position in the loop variable ‘i’. When a full key match is found match ==...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: avoid off-by-one read from userspace We attempt to access count + 1 byte from userspace using memdupuserbuffer, count + 1. However, userspace only supplies a buffer of count bytes, and only those count bytes are...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix off by one in ep93xxdivrecalcrate The psc-div array has psc-numdiv elements. These values are generated when we call clkhwregisterdiv. They are adcdivisors and ARRAYSIZEadcdivisors etc. Therefore, this conditio...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: nbpfaxi: Fix memory corruption in probe The nbpf-chan array is allocated earlier in the nbpfprobe function and it has “numchannels” elements. These three loops iterate one element farther than they should and corrupt...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarmsstore The sysfs buffer passed to alarmsstore is allocated with ‘size + 1’ bytes and a NUL terminator is appended. However, the ‘size’ argument does not account for this extra byt...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: 6lowpan: corrected an off-by-one error in the multicast context address compression process. The second memcpy in lowpaniphcmcastctxaddrcompress uses &data1 as the destination and &ipaddr-s6addr11 as the source. However, both...

Astra Linux – vulnerability in ldns

NLnet Labs’ ldns version 1.2.0 up to and including version 1.9.0, when used in applications as a stub resolver over UDP, fails to match the query destination address and port with the response source address and port. Additionally, neither the query ID nor the nature of the query matches that of...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: sd: A “off-by-one” error has been fixed in sdreadBlockcharacteristics. If the device returns page 0xb1 with a length of 8 this occurs with QEMU v2.x, for example, sdReadBlockCharacteristics may attempt an out-of-bounds...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix user-after-free from session log off There is a race condition between smb2 session log off and smb2 session setup. This causes user-after-free from session log off. This add sessionlock when setting SMB2SESSIONEXPIRED...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: e1000/e1000e: Fixed a leak in DMA error cleanup If an error occurs while mapping TX buffers, the driver should unmap any buffers that have already been mapped for that skb. Since the counter is incremented after a successful...