Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: avoiding deadlocks in isosocktimeout The isosocktimeout function takes locksock, so disabling the timer while holding that lock may lead to a deadlock. isosocktimeout may also run concurrently with isoconndel,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Validating the written enum value in geputenumdouble The geputenumdouble function passes the user-supplied enumeration index item0 to sndsocenumitemtoval, without checking it against the number of items in the enum: r...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Rejects adapter interrupt forwarding if it is already enabled. The MPCIFC instruction does not allow registering adapter interrupts without first unregistering them. Therefore, any request to enable interrupt...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: 1. fs/proc/taskmmu: Fixed the race condition in makeuffdwphugepte where updates to the “Dirty” or “Accessed” status of a page might be lost when PAGEMAPSCAN writes-protects a HUGETLB PTE. 2. fs/proc/taskmmu: The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftct: Fixed a use-after-free in the destroy function for timeout objects. The nftcttimeoutobjDestroy function frees the timeout object using kfree, immediately after nfcttimeoutout, without waiting for an RCU grace...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fixed esdhcchangepinstate, allowing the default state to be restored. The esdhcchangepinstate function checks for pins100mhz and pins200mhz at the beginning of the function. If either is not defined, it...

Astra Linux – Vulnerability in requests

The Requests library is an HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function used a predictable filename when extracting files from zip archives into the system’s temporary directory. If the target file already existed, it was reused without validation....

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf: Exclusive maps are rejected as inner maps in map-in-map structures. An exclusive map created using exclproghash is bound to a single program by the checkmapprogcompatibility function. This function refuses to load any progra...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fill the first free targets slot during auto-discovery Any invalid endpoint decoder pointer in the target array of an active region is not allowed by the cxl driver. This means that the cxl driver always assumes that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: usb: image: mdc800: kill download URB on timeout The mdc800deviceread function submits the downloadurb and waits for its completion. If the timeout occurs and the device does not respond, the function returns without terminati...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit, 8c30b0018f9d “openrisc: Add jump label support”, copied from arm64 and did not properly account for how icache invalidation operates on remote cores in OpenRISC. On OpenRIS...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Avoid dereferencing a stale runlist element during MFT writeback. The ntfswritemftblock function maps each $MFT record through the $MFT data runlist. For sub-folio clusters, it retrieves a struct runlistelement from...

Astra Linux – Vulnerability in Mako

Mako is a template library written in Python. Prior to version 1.3.11, the TemplateLookup.gettemplate function was vulnerable to path traversal attacks when the URI started with // e.g., //../../../secret.txt. The root cause of this issue was an inconsistency between two implementations of path...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fixed the issue where failures in setting up fdev led to incorrect cleanup during the idxdcdevopen function. The faileddevadd and faileddevname paths fail to release the file-device reference while wq-wqlock is...

Astra Linux – Vulnerability in p7zip, 7zip

7-Zip is a file archiver with a high compression ratio. Versions 26.00 and earlier contained a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer GetCuSize shift UB. This vulnerability could allow attackers to execute arbitrary code or cause...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Added a depth limit to indxfindbuffer to prevent stack overflow. indxfindbuffer recursively descends the B+ tree index without a depth limit. A malicious NTFS image with circular index node references causes unbounded...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions prior to 3.25.0 have a flaw in the path traversal filter in channels/drive/client/drivefile.c. The containsDotDot function detects ../ and .. in the path, but misses .. when it’s the last component without a trailing...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The mcbausb driver fails to populate the ndochangemtu function, allowing for a buffer overflow. Sending a PFPACKET message allows bypassing the CAN driver’s logic and directly reaching the xmit function of the CAN driver. The onl...

Astra Linux – Vulnerability in libde265

libde265 is an open-source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit caused a segmentation fault in the picparameterset::setderivedvalues function. This issue has been fixed in version 1.0.17...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Centralized validation of the $INDEXROOT header. A dedicated helper function has been added to perform more stringent validation of the $INDEXROOT, and this function is used for both directory inodes and named index...