Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: block/rnbd-srv: Check for unlikely string overflows Since “devsearchpath” can technically be as large as PATHMAX, there was a risk of truncation when copying it and a second string into “fullpath”—since “fullpath” is also size...

Linux kernel block device driver Heap Buffer Overflow Info Disclosure

The vulnerability of the rnbdsrvgetfullpath function in the drivers/block/rnbd/rnbd-srv.c module of the Linux block device support driver is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to gain access to protected information...