Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A issue was discovered in the driver/mtd/ubi/cdev.c file within the Linux kernel 6.2. There is a division-by-zero error in the dodivsz, mtd-erasesize function, which is indirectly used by ctrlcdevioctl, when mtd-erasesize is 0...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: ubi: Fixed a race condition between ctrlcdevioctl and ubicdevioctl. Hulk Robot reported a KASAN report regarding a use-after-free issue: ========================================== BUG: KASAN: use-after-free in...

Important: kernel

Issue Overview: An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in dodivsz,mtd-erasesize, used indirectly by ctrlcdevioctl, when mtd-erasesize is 0. CVE-2023-31085 A flaw in the kernel Xen event handler can cause a deadlock with Xen conso...

DEBIAN-CVE-2021-47634

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix race condition between ctrlcdevioctl and ubicdevioctl Hulk Robot reported a KASAN report about use-after-free: ================================================================== BUG: KASAN: use-after-free in...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition between ctrlcdevioctl and ubicdevioctl...

UBUNTU-CVE-2023-31085

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in dodivsz,mtd-erasesize, used indirectly by ctrlcdevioctl, when mtd-erasesize is 0...

PT-2022-29376

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed i...

PT-2022-29703

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed ...

PT-2022-30686

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30478

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed ...

PT-2022-30599

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30026

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30297

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...