Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: arm64: Set UXN on swapper page tables This issue was accidentally fixed upstream via c3cee924bd85 "arm64: head: cover the entire kernel image in the initial ID map", as part of a major refactoring of the arm64 boot flow. This...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: blk-mq: Use a quiesced elevator switch when reinitializing queues. The hctx’s runwork function may race with the elevator switch during the reinitialization of hardware queues. In this context, the queue is merely frozen, but...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: preventing dereferencing of ZEROSIZEPTR when numifs is zero The driver allocates arrays for ports, FDBs, and filter blocks using kcalloc, with ethsw-swattr.numifs as the element count. When the device reports zero...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: comedi: A divide-by-zero issue in comedibufmunge has been fixed. The comedibufmunge function performs a modulo operation: async-mungechan %= async-cmd.chanlistlen. However, it does not check whether chanlistlen is zero first. If ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Do not remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix a kernel panic when sending untagged traffic via a VxLAN device. This issue occurs during the check for fragmentation in brnfdevqueuexmit. It depends on the following conditions: 1 The brnetfilter modu...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: Multitouch: fixed an out-of-bounds bit access in mtioflags mtioFlags is a single unsigned long variable, but functions like mtprocessSlot, mtreleasePendingPalms, and mtreleaseContacts use it as a per-slot bitmap indexed by t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check the return value of rpcsockaddr2uaddr in rpcbregisterinet4/6. rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking if it is NULL. rpcsockaddr2uaddr returns NU...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: xen: scsiback: Instead of permanently removing unsubmitted commands, they are simply freed. The scsibackgetpendreq function retrieves a command tag and returns a vscsibkpend structure. The secmd embedded in this structur...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: udf: Validation of free block extents against the partition length The udffreeblocks function checks the logical block number and count against the partition length. However, the extent offset is dropped from this final value. A...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: armffa: A NULL dereference in ffapartitioninfoget was fixed. The ffapartitioninfoget function passes uuidstr directly to uuidParse, without a NULL check. When a NULL value is passed as an argument, uuidParse calls...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: BPF: Creation of BPFMAPTYPEINODESTORAGE maps is rejected if BPF LSM is not initialized. When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled into the kernel. However, if BPF LSM is not explicitly...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys – Fixed the OOB read issue in pefiledigestpecontents. pefiledigestpecontents calculates the hash length of the trailing data as pelen - hashedbytes + certssize. A crafted PE could cause this subtraction to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Avoid re-filling the RX queue after teardown. The commit b917507e5ad9 vsock/virtio: Stop workers during .remove made the RX worker jump to its common exit when rxrun is cleared. However, that exit still re-fills the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize the completion object before requesting the interrupt request IRQ. In the report by Jaeyoung Chung: “The spearadcprobe function in drivers/iio/adc/spearadc.c registers its interrupt handler using...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt76x02 – Do not emit warnings for invalid RX descriptor lengths. The length of the MPDU in the RX descriptor comes from the hardware. In monitor mode with the fcsfail filter enabled, the hardware passes corrupted...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fixed the kernel panic caused by incorrect error handling. The error path when failing to register devices on the TEE bus contains a bug that leads to kernel panic as follows: 15.398930 Unable to handle kernel paging...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: Validated the lengths of fields in dmMigLockResHandler. A node receiving a DLMMIGLOCKRES message relies on several fields of the peer-provided dmMigratableLockRes without any validation. numlocks and locknamelen are...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain AppArmor patches that incorrectly cause a sleep state when holding a spinlock in notification handling code. This bug can be triggered by an unprivileged local user, and can lead to kernel panic or deadlock situations...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsllpuart: disable dma rx/tx use flags in lpuartdmashutdown lpuartdmashutdown tears down the lpuart DMA mechanism, but lpuartFlushBuffer may still occur. This attempt to access DMA APIs occurs if the lpuartDMATXuse...