Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Rejects direct userspace writes to reserved $LX xattrs NTFS3 uses $LXUID, $LXGID, $LXMOD, and $LXDEV as internal WSL permission metadata and reloads them into iuid, igid, and imode from the ntfsgetwslperm function. Since t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: tipc: Fixed a use-after-free of the discoverer in tipcdiscrcv. bearerdisable frees b-disc using tipcdiscdelete’s plain kfree, but tipcdiscrcv still dereferences b-disc in the RX softirq under rcureadlock tipcudprecv - tipcrcv ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: The size of the bound DMA command body was incorrect when calculating the suffix pointer. The vmwcmddma function determines the DMA suffix as follows: unsigned long &cmd-body + header-size - sizeofsuffix However, it...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix for the enum control bounds check The simplemuxcontrolput function rejects values that are greater than e-items. However, enum control values are based on a zero-based system. For the two-entry mux...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16260: fixed a division by zero in the writeraw function. A validation check for the sampling frequency value is added before using it as a divisor. A user who sets the samplingfrequency sysfs attribute to zero wil...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: Validates DFS referral PathConsumed. The parsedfsreferrals function validates that the response contains the corrected referral entry array, as well as the per-referral string offsets. However, the response also...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fixed the leak in xfrmstateconstruct. The function attachauthtrunc can allocate x-aalg while leaving x-props.aalgo at zero when the selected authentication algorithm does not have a sadbalgid. A real case is for CMAC/AES...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: slip: The bound decode function reads beyond the end of the compressed packet, which can lead to security vulnerabilities. slhcuncompress: This function parses a VJ-compressed TCP header by using decode and pull16. Neither...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: speakup: keyhelp: The guard-letteroffsets might result in out-of-range indexing. helpinit builds the letteroffsets array by using the first byte of each function name as an index through start & 31 - 1. If function names are...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: macvlan: The neededheadroom and neededtailroom values are inherited from lowerdev during the macvlaninit function. However, these values are left set to 0 after inheritance. When lowerdev requires additional headroom or tailro...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Zero-initialized BSG stack buffers are used to avoid information leaks. Several BSG handlers store their requests/responses in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE, and fill it using...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In net/sched’s schhtb function, there is a limitation on the number of hops involved in packet classification. The htbclassify function follows each filter-selected inner class by switching to cl-filterlist, but it does not limit...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ceph: Rejects ranks outside CEPHMAXMDS in mdsmap decoding The exporttargets entries in MDSMap are monitored by the kernel. The checknewmap function uses each entry as a bit in a fixed stack bitmap. Therefore, ranks outside the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: The crash in iclupdatetopdownevent has been fixed. perffuzzer detected a hard-lockup crash on a RaptorLake machine: Oops: General Protection Fault, possibly at address 0xffff89aeceab400: 0000 CPU: 23 UID: 0 PID: 0...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: For the mtd:rawnand device, the ONFI extended parameter page sections were validated. The nandflashdetectextparampage function allocates the length declared by the ONFI parameter page. It then treats the data as a fixed header...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Limiting PTP to a single page The commit 391e69143d0a increased CTPTPNUM from 1 to 4 to support 256 playback streams. However, the additional pages are not utilized correctly by the hardware. The CT20K2 hardware...

Astra Linux – Vulnerability in Poppler

A vulnerability was discovered in the freedesktop poppler version 20.12.1, allowing remote attackers to trigger a denial of service DoS attack through a crafted .pdf file, targeting the FoFiType1C::convertToType1 function...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sched/core: A use-after-free bug has been fixed in dupusercpusptr. Since commit 07ec77a1d4e8 “sched: Allows task CPU affinity to be restricted on asymmetric systems”, the setting and clearing of usercpusptr are performed under...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: can: mcan: pci: added the missing mcanclassfreedev function in probe/remove methods. In mcanpciremove and the error handling path of mcanpciprobe, mcanclassfreedev should be called to release resources allocated by...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand function is supposed to wait for the write buffer to become available or return an error. However, instead, it updates the transfer buffer and...