Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PM: runtime: Fixed a race condition related to device removal The following code in pmruntimework may cause dereferencing of the dev-parent pointer after the parent device has been freed: c / Maybe the parent is now able to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipc: fixed to protect IPCS lookups using RCU. syzbot reported that it discovered a use-after-free vulnerability. 0 0: https://lore.kernel.org/all/[email protected]/ idrforeach is protected by rwsem, but...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: kernfs: A use-after-free issue has been fixed in kernfsremove. Syzkaller managed to trigger concurrent calls to kernfsremovebynamens for the same file, resulting in a KASAN detected use-after-free. This race condition occurs...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: Unlock immaprwsem before releasing after-split folios. foliosplit continues to dereference the mapping after the split: shmemunchargemapping-host and remappage occur while the folios are still frozen/locked...

Astra Linux – Vulnerability in WebKit2GTK

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: A use-after-free issue was fixed in rxemmap. The rxemmap function removes an rxemmapinfo structure from the pendingmmaps list and releases the pendinglock while the kref of the structure is still set to 1: c...

Astra Linux – Vulnerability in Chromium

The use of Translate in Google Chrome before version 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in WebKit2GTK

A “use-after-free” issue has been addressed through improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, and watchOS 10.6. Processing maliciously crafted web content may lead to an...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fixed a use-after-free bug in smpexecutetasksg When executing an SMP task fails, the smpexecutetasksg function calls deltimer to delete the “slowtask-timer” timer. However, if the timer handler sastaskinternaltimedo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: HIDP: Fixed a possible UAF issue. This fix addresses the following issue caused by not dropping the l2capconn reference when the user-remove callback is called: 97.809249 l2capconnfree: Freeing the conn...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: ffs: Fix use-after-free for epfile Consider a case where ffsfuncepsdisable is called from ffsfuncdisable as part of the composition switch. At the same time, ffsepfilerelease is called from the user space. ffsepfilerelease...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Media: Davinci: VPif – Fix for use-after-free on driver unbind. The driver allocates and registers two platform device structures during the probe phase, but these devices are never deregistered during driver unbind. This results...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: free fibalias with kfreercu on insert error path The fibtableinsert function publishes newfa into the leaf’s falist using fibinsertalias. This process occurs before calling the fib entry notifiers. When a notifier fail...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: fixed a use-after-free in ip6finishoutput2 The ip6finishOutput2 function caches a pointer to the IPv6 destination address daddr before invoking lwtunnelxmit. The LWT-BPF transmit path or other encapsulation operations withi...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fixed the issue where free was used after the QP was destroyed. When querying a QP via the netlink flow, the only synchronization mechanism for that QP is rdmarestrackget. However, during the destruction of the QP via...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fixed a use-after-free in ppldoflush. The loop in ppldoFlush continues iterating after calling ppliounitfinished, accessing io-pendingflushes, and leading to a use-after-free. A break statement was added to stop the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: Cancel pending work on remove to fix a use-after-free issue. The lgg15data structure is allocated with devm and contains a work item. The report handlers schedule this work directly from the device input. lgg15event...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: afcan – Do not leave a dangling sk pointer in cancreate. When the cancreate function fails, it releases the allocated sk object. However, sockinitdata has already attached this object to the provided sock object. This will...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fixed a possible use-after-free issue when removing a bridge port. When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disabling the per-port multicast context on each port a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: A use-after-free issue was addressed in VEPA multicast source pruning. In ixgbevfcleanrxirq, frames whose source MAC matches the own address of the VF are pruned by freeing the skb and proceeding to the next descriptor...