Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: block: nullblk: end timed out poll request When a poll request times out, it is removed from the poll list. However, since the request is not completed, it becomes exposed and never gets a chance to be processed. This issue is...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure when it could return data for a previously requested key, if that previous request timed out due to a low POLLTIMEOUT. Remediation A fix was pushed into the master branch but not yet published. References - GitHub...

PT-2022-29249

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description A potential security issue has been identified in the Linux Kernel, where a null blk end timed out poll request occurs. The actual impact and attack plausibility have not yet been proven...