25119 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: jfs: Prevent copying of nlink with a value of 0 from the disk inode. syzbot reported a deadlock in diFree. 1 When calling “ioctl$LOOPSETSTATUS64”, the offset value passed in is 4, which does not match the mounted loop device...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drivers/perf: Fixed the issue where the alidrwpmu driver failed to clear the interrupt status during interrupt processing. The alibabauncorepmu driver forgot to clear all interrupt statuses during interrupt handling. After the PM...
Astra Linux – Vulnerability in Apache2
The vulnerability of “Allocation of Resources Without Limits or Throttling” in Apache HTTP Server’s modmd, through OCSP response data. This issue affects Apache HTTP Server versions 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes this issue...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 has an improper neutralization of line delimiters, which is relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can cause a new line to be inserted into a spool header file, thereby indirectly allowing unauthenticated...
Astra Linux – Vulnerability in opensc
A flaw was discovered in OpenSC packages that could allow for a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length PIN is passed. This issue poses a security risk, especially for OS...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fixed a double-free in the error path. If the uvcstatusinit function fails to allocate the inturb variable, it will free the dev-status pointer without resetting it to NULL. This causes the kfree call in...
Astra Linux – Vulnerability in bluez
The bluetoothd function from the bluez library incorrectly preserves the discoverable status of adapters when a device is powered down, and restores that status when the device is powered on again. If a device is in the discoverable state while powered down, it will remain discoverable when the...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Power: Supply: ADP5061: Fix for out-of-bounds read in adp5061getchgtype The fields ADP5061CHGSTATUS and CHGSTATUS are masked with 0x07, which indicates a length of 8. However, the size of the adp5061chgtype array is 4. This may...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: OpenVSwitch: fixed the issue where locking occurred when trying to unregister a netdev with a carrier. The commit in the “fixes” tag attempted to fix this issue through the following sequence of calls: dooutput → ovsvportsend →...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: In loopsetstatusfrominfo, the checks for lo-looffset and lo-losizelimit should be performed before reassigning them. This is because if an overflow error occurs, the original correct value will be changed to the wrong value, and ...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fixed an out-of-bounds access issue related to the cioignore function. The channel-subsystem-driver scans for newly available devices whenever device IDs are removed from the cioignore list, using commands like: echo fr...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: drm/sti: The return type of stidvo,hda,hdmiconnectormodevalid has been corrected. With Clang’s Kernel Control Flow Integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: ext4: Drop the extent cache when splitting an extent fails When splitting an extent fails, it is possible that some extents are still being processed, and an error is returned directly. This will result in stale extent entries...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Disabled the unnecessary interrupt to avoid kernel panic. There is a hardware bug where the interrupt STMBUFHALF may be triggered after or when the interrupt is disabled. This can lead to unexpected kernel panic...
The vulnerability of the drivers/md/dm-zone.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/md/dm-zone.c component in the Linux operating system is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROOT-OS-DEBIAN-13-CVE-2026-54371 CVE-2026-54371 in attr - Patched by Root
Root has patched CVE-2026-54371 in the attr package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-39508 CVE-2024-39508 in linux - Patched by Root
Root has patched CVE-2024-39508 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2022-49967 CVE-2022-49967 in linux - Patched by Root
Root has patched CVE-2022-49967 in the linux package for Root:Debian:11. Multiple fixed versions available...