Lucene search
+L
AstralinuxRecent

20387 matches found

AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability in Linux

A flaw was discovered in the Linux kernel, as access to the global variable fgconsole is not properly synchronized, resulting in a use after free in confontop...

7CVSS6.6AI score0.01026EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.17 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fixed a null-ptr-deref in az6027i2cxfer Wei Chen reported a kernel bug as follows: General protection fault, likely for non-canonical addresses KASAN: Null-ptr-deref within the range...

5.5CVSS6.4AI score0.0016EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.17 views

Astra Linux – Vulnerability in liblouis

A buffer overflow vulnerability has been discovered in Liblouis v.3.24.0. This vulnerability allows a remote attacker to cause a denial of service through the use of the compileTranslationTable.c and lousetDataPath functions...

7.5CVSS7.5AI score0.01356EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.3 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Regulator: Core – Fix for NULL dereferencing during unbinding due to stale coupling data Failing to reset couplingdesc.ncoupled after freeing coupledrdevs can lead to NULL pointer dereferencing when accessing the regulators after...

5.5CVSS5.7AI score0.00164EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.5 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: 9p: transfd/p9conn Cancel: release the client lock earlier. The syzbot reported a double-lock issue here, and we no longer need this lock after the requests have been moved to the local list. We can simply release the lock earlie...

7.5CVSS5.2AI score0.00376EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Tracing/histogram: Fixed a potential memory leak in kstrdup. The kfree function is not called in the error path, resulting in the memory allocated by kstrdup not being freed properly. p = param = kstrdupdata-paramsi, GFPKERNEL...

5.5CVSS5.9AI score0.0021EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: wilc1000: using vmmtable as an array in the wilc struct. Enabling KASAN and running some iperf tests causes some memory issues related to vmmtable. Bug: KASAN: A slab-out-of-bounds issue exists in...

7.8CVSS5.1AI score0.00244EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: phy: ralink: mt7621-pci: add sentinel to quirks table By fixing socdevattr to register the SOC as a device, the kernel will encounter an OOPs error in socdevicematchattr. This quirks test was introduced in the staging driver in t...

5.5CVSS5.4AI score0.00191EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: The probe fails when the workqueue cannot be enabled The workqueue is enabled when the appropriate driver is loaded, and disabled when the driver is removed. When the driver is removed, it assumes that the...

5.5CVSS6AI score0.00239EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.2 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: fixed a NULL pointer dereference when attempting to start a new transaction. BUG Syzbot reported a NULL pointer dereference, accompanied by a crash: FAULTINJECTION: Forced a failure. starttransaction+0x830/0x1670...

5.5CVSS6.4AI score0.00288EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.2 views

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Thermal: Prevent potential string overflows. The dev-id value comes from idaalloc, so it’s a number between zero and INTMAX. If it’s too high, the sprintf functions will cause overflow...

7.8CVSS5.2AI score0.00236EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nfnetlinkosf: Validated the lengths of individual options in fingerprints. nfnlosfaddcallback validates the bounds of optnum and the NUL-termination of strings. However, it does not check the lengths of individual options. A...

7.1CVSS6.2AI score0.00122EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.14 views

Astra Linux – Vulnerability in giflib

Giflib contains a double-free vulnerability, which is caused by a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions necessary to trigger this vulnerability are complex, but it may still occur...

7CVSS5.8AI score0.00144EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel before version 5.15.3, fs/quota/quotatree.c does not validate the block number in the quota tree on disk. This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file...

5.5CVSS6.4AI score0.01339EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: hwrng: amd – Fixed the PCI device reference count leak. foreachpcidev is implemented through pcigetdevice. The comment for pcigetdevice states that it will increase the reference count of the returned pcidev, and also decrease...

5.4AI score0.00237EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.16 views

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.22.0, the ecamencodercompressh264 function relied on server-controlled dimensions and did not validate the source buffer size, resulting in a out-of-bounds read in swsscale. This vulnerability has been fixed in...

9.1CVSS5.5AI score0.00508EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in WebGL in Google Chrome prior to version 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

8.8CVSS8.3AI score0.01512EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability in libde265

It was discovered that Libde265 v1.0.14 contains a global buffer overflow vulnerability in the readcodingunit function at slice.cc...

8.8CVSS6.7AI score0.00867EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: LZ4: fixed the issue of partial reading beyond the bounds of the buffer during decoding. During partialDecoding, an EOF occurs if either the output buffer is full or if reading further beyond the offset is not possible. In some...

7.8CVSS5.8AI score0.00283EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Ansible

A flaw was discovered in the ansible module, where credentials are disclosed in the console logs by default, and are not protected by security features when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucket Pipeline credentials. The greatest threat posed ...

5.5CVSS7.1AI score0.0034EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpfsockaddr Syzkaller identified a kernel warning in the bpfsockaddr function: c 0: r0 = 0 1: r2 = u32 r1 + 60 2: exit This triggers the verifier bug: an error occurs during the context access...

6AI score0.00222EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in PHP 8.1, PHP 7.3

In PHP versions 8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, a heap buffer overflow occurs in the arrayMerge function when the total number of elements in packed arrays exceeds 32-bit limits or HTMAXSIZE. This issue is caused by an integer...

8.2CVSS7.3AI score0.00465EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: pid: Added a check for ns null in pidnrns. taskpidnrns ns = taskactivepidnscurrent; pidnrnsrcudereferencetaskpidptrtask, type, ns; if pid && ns-level level Sometimes, null is returned for taskactivepidns. This can trigger kernel...

5.5AI score0.0021EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: sched: actife: initialize struct tcife to fix KMSAN kernel-infoleak. This issue was fixed by using the syzbot tool to detect and address the KMSAN kernel-infoleak. In tcfifedump, the variable ‘opt’ was partially initialized...

5.7AI score0.00218EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.13 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting the ACL. A NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL later. It finds that the ACL is only a default ACL based on the mode bits, not the...

8CVSS6AI score0.00442EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerability in faad2

A issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function ltprediction located in ltpredict.c. This allows an attacker to cause code execution...

7.8CVSS7.5AI score0.01289EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dm: Clearing the clone request’s bio pointer when the last cloned bio is freed It has been observed that stale values of rq-bio can lead to double initialization of cloned bios in request-based device-mapper targets, resulting in...

7.8CVSS6.5AI score0.00117EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.5 views

Astra Linux – Vulnerability in WebKit2GTK

This issue has been resolved through improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6, iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...

8.8CVSS7.2AI score0.01204EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.13 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The hardcoded hdr2len parameter was replaced with the offsetof function in smb2calcmaxoutbuflen. After this commit e2b76ab8b5c9 "ksmbd: add support for read compound", the management of response buffers was changed to use ...

9.8CVSS7AI score0.00502EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: Server: Fixed a use-after-free in smb2open. The opinfo pointer, obtained via rcudereferencefp-fopinfo, is dereferenced after rcureadunlock, creating a use-after-free scenario...

9.8CVSS5.3AI score0.00308EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerability in Thunderbird

The ms-msdt, search, and search-ms protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt. These applications have known vulnerabilities that have been exploited in the wild although we know of none exploited through Thunderbird. Therefore, in thi...

6.5CVSS7.4AI score0.00783EPSS
SaveExploits1References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability in Firefox

The HTML Sanitizer should have sanitized the href attribute of SVG use tags; however, it incorrectly did not sanitize the xlink:href attributes. This vulnerability affects Firefox versions earlier than 102...

6.1CVSS6.8AI score0.00374EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.13 views

Astra Linux – Vulnerability in htmldoc

HTMLDOC v1.9.18 contains a buffer overflow in the parsepre function, ps-pdf.cxx:5681...

9.8CVSS8.7AI score0.00672EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: scsi: scsidebug: Do not call kcalloc if size argument is zero. If the size argument to kcalloc is zero, it returns ZEROSIZEPTR. Therefore, for the subsequent NULL pointer check to work on the returned pointer, kcalloc must not...

5.5CVSS5.4AI score0.00238EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: The governor parameter is set to fix double-free in cpufreqdbsgovernorinit. When kobjectinitandadd fails, cpufreqdbsgovernorinit calls kobjectput&dbsdata-attrset.kobj. The callback function for releasing the kobject,...

7.8CVSS5.9AI score0.00129EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.15 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Do not allow SETID to refer to another table. When performing lookups for sets within the same batch using their IDs, a set from a different table can be used. However, when the table is removed, a reference ...

7.8CVSS6.5AI score0.00236EPSS
SaveExploits6References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fixed an issue where invalid address access occurred when enabling the SCAN log level. The variable i is changed when setting a random MAC address, causing invalid address access when printing the value of...

4.9AI score0.00257EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.14 views

Astra Linux – Vulnerability in Node-EJS

The ejs also known as Embedded JavaScript templates package version 3.1.6 for Node.js enables server-side template injection in settings view optionsoutputFunctionName. This is parsed as an internal option, and the outputFunctionName option is overwritten with an arbitrary OS command which is...

9.8CVSS7AI score0.32808EPSS
SaveExploits7References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fixed the calltrace warning in psphwfini. The call trace occurs when the amdgpu is removed after a mode1 reset. During a mode1 reset, from suspend to resume, there is no need to reinitialize the ta firmware buffer,...

5.5CVSS5.6AI score0.00191EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Scripting. The supported versions affected by this vulnerability are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM...

5.9CVSS6.5AI score0.01035EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: vxlannacreate: Validates the lengths of ND options in vxlannacreate. vxlannacreate checks the ND options based on the lengths provided by the user. A malformed option may cause the parser to progress beyond the calculated opti...

5.5CVSS6.1AI score0.00123EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fix for possible memory corruption. The Init Control Block is being referenced incorrectly. It should be referenced correctly...

7.8CVSS5.9AI score0.00244EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: media: ngene: Fixed a out-of-bounds bug in ngenuecommandconfigfreebuf. Fixed a 11-year-old bug in ngenuecommandconfigfreebuf by addressing the following warnings detected by -Warray-bounds: arch/alpha/include/asm/string.h:22:1...

7.1CVSS5.8AI score0.00234EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.16 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Add the missing unmap in sndcx23885hwparams In the error path, add cx23885alsadmaunmap to release the resource acquired by cx23885alsa DMAmap...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not log conflicting inodes if it’s a directory that was moved during the current transaction. We cannot log an conflicting inode if it’s a directory that was moved from one parent directory to another parent directory...

5.9AI score0.00197EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.4 views

Astra Linux – Vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. A OOB-read vulnerability has been discovered in gstwavparseadtlchunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. A...

7.5CVSS6.4AI score0.0084EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “quota”: Fixed the potential NULL pointer dereferencing. The race condition below may cause NULL pointer dereferencing. P1 P2 dquotfreeinode quotaoff dropdquotref removedquotref dquots = idquotinode dquots = idquotinode...

4.7CVSS5.6AI score0.00189EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoided potential dereferencing of error pointers in stihqvdpatomiccheck. The return value of drmatomicgetcrtcstate needs to be checked. This is done to avoid using the error pointer ‘crtcstate’ in case of a failure...

5.5CVSS5.7AI score0.00207EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in net-snmp

The handleipv6IpForwarding function in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP version 5.4.3 to 5.9.3 has a NULL Pointer Exception bug. This bug can be exploited by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in a Denial of Service attack...

6.5CVSS6.6AI score0.5346EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fixed a memory leak in array reallocation for stack state. If an error NULL is returned by krealloc, callers of reallocarray would set their allocation pointers to NULL. However, when an error occurs in krealloc, i...

5.5CVSS5.6AI score0.00191EPSS
SaveExploits0References1
Total number of security vulnerabilities20387