149491 matches found
Astra Linux – vulnerability in linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: can: etases58x: allow partial RX URB allocation to succeed When es58xallocrxurbs fails to allocate the requested number of URBs but manages to allocate some, it returns an error code. This causes es58xopen to return early, skippi...
Astra Linux – vulnerability in linux-5.10, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Propagate sdmatxinitahg errors settxreqheaderahg ignores the return value of sdmatxinitahg. If sdmatxinitahg fails, it returns before initializing tx-txreq. However, settxreqheaderahg ignores the error and returns the...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gfx3d: add parent to parent request map After commit d228ece36345 “clk: divider: remove roundrate in favor of determinerate”, determining the GFX3D clock rate caused a crash, as the passed parent map does not provide t...
Astra Linux – vulnerability in Thunderbird
Matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. Versions of matrix-js-sdk prior to 34.11.0 are vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients running matrix-js-sdk to issue arbitrary authenticated GET...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-ep: Fixed incorrect variable used when calling devmrequestmemregion The rcarpcieparseoutboundranges function uses the devmrequestmemregion macro to request a required resource. A string variable located on the stack is...
Astra Linux – vulnerability in linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aeadrequestfree to match aeadrequestalloc Use aeadrequestfree instead of kfree to properly free memory allocated by aeadrequestalloc. This ensures that sensitive crypto data is zeroed before being freed...
Astra Linux – Vulnerability in python-urllib3
urllib3 is a user-friendly HTTP client library for Python. Previously, urllib3 would not remove the HTTP request body when an HTTP redirect response was received using status 301, 302, or 303 after the request’s method changed from one that could accept a request body such as POST to GET, as...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: Kyber: An out-of-bounds access issue occurs when the thread is preempted. The function blkmqschedbiomerge retrieves the ctx and hctx for the current CPU and passes the hctx to -biomerge. The function kyberbiomerge then retrieves...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: HID: core: Do not bypass hidhwrawrequest The hidhwrawrequest function is actually useful for ensuring that the provided buffer and length are valid. Directly calling this function in the low-level transport driver bypassed those...
Astra Linux – vulnerability in linux-5.10
In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rosesendframe The syzkaller reported an issue: KASAN: null-ptr-deref in range 0x0000000000000380-0x0000000000000387 CPU: 0 PID: 4069 Comm: kworker/0:15 Not tainted...
Astra Linux – vulnerability in linux-5.10, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmetreqcomplete The implementation of nvme target-queueresponse may free the request passed as an argument. This can potentially lead to a use-after-free condition involving the request pointer when...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: block: Fixed a possible memory leak for rqwb when deviceadddisk fails. kmemleak reported memory leaks in deviceadddisk: - 3 new suspected memory leaks. Unreferenced object: 0xffff88800f420800 size 512: Command “modprobe”, PID...
Astra Linux – vulnerability in net-snmp
Net-SNMP provides various tools related to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials could use a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable to trigger a NULL pointer dereference. Version 5.9.2 includes a patch. Users...
Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled When calling cryptofinalizerequest, BH should be disabled to avoid triggering the following calltrace: ------------ cut here ------------ WARNING: CPU: 2 PID: 74 at...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: mptcp: fixed a NULL pointer in canacceptnewsubflow. When testing the valkey benchmark tool with MPTCP, the kernel panics in mptcpcanacceptnewsubflow because subflowreq-msk is NULL. Call trace: mptcpcanacceptnewsubflow...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: block: Do not revert the iterator for -EIOCBQUEUED. The blkdevreaditer function includes some unusual checks. For example, it checks whether the result is greater than or equal to zero before adjusting the position and count. Thi...
Astra Linux – vulnerability in linux-5.15
In the Linux kernel, the following vulnerability has been resolved: block: do not allow the same type of rqqos to be added more than once During our testing of iocost, we observed some list add/del corruption within the innerwalk list in ioctimerfn. The reason can be explained as follows: cpu 0 c...
Astra Linux – Vulnerability in Chromium
Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leverage social engineering to bypass web origin policy through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as follows: general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 1 PREEMPT SMP KASAN NOPTI KASAN: maybe wild-memory-acce...