Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfrm: Update ipcompscratches with NULL when freed Currently, if ipcompallocscratches fails to allocate memory, ipcompscratches holds an obsolete address. Therefore, when we try to free the percpu scratches using...

CVE-2022-50569

CVE-2022-50569 concerns the Linux kernel xfrm/ipcomp_scratches handling. When ipcomp_alloc_scratches() fails, ipcomp_scratches retains an obsolete address, causing ipcomp_free_scratches() to attempt vfree on non-existent memory during free. The fix updates ipcomp_scratches to be NULL when scratch...

kernel: xfrm: Update ipcomp_scratches with NULL when freed

In the Linux kernel, the following vulnerability has been resolved: xfrm: Update ipcompscratches with NULL when freed Currently if ipcompallocscratches fails to allocate memory ipcompscratches holds obsolete address. So when we try to free the percpu scratches using ipcompfreescratches it tries t...