Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm: Avoid leaving partial pfn mappings in error cases. As Jann points out, PFN mappings are special. Unlike normal memory mappings, there is no lifetime information associated with the mapping—it’s just a raw mapping of PFNs,...

Astra Linux – Vulnerability in Chromium

The information leak in Skia within Google Chrome before version 152.0.7977.65 allowed a remote attacker to obtain cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/shmem-helper: The erroneous “put” operation has been removed from the error path. The drmgemshmemmmap function does not have a reference in the error code path, resulting in the dma-buf shmem GEM object being freed...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In libceph, the error from monhandleauthdone should be returned. Currently, any error from cephauthhandlereplydone is propagated via finishauth, but it is not returned from monhandleauthdone. This results in higher layers...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: be2net: Fixed NULL pointer dereferencing in becmdgetmacfromlist. When the parameter pmacidvalid, an argument of becmdgetmacfromlist, is set to false, the driver may request the PMACID from the firmware of the network card. This...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ftruncate: passing a signed offset. The old ftruncate system call, which used the 32-bit offt type, missed a sign extension when called in compat mode on 64-bit architectures. As a result, passing a negative length accidentally...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in the DIB encoder could lead to out-of-bounds read or write operations. This vulnerability has been fixed in versions 7.1.2-16 and 6.9.13-4...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: mmc: uniphier-sd: A resource leak has been fixed in the remove function. A call to tmiommchostfree is missing from the remove function, in order to balance a call to tmiommchostalloc in the probe. This is done in the error handli...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mptcp: The “kern” flag was removed from fallback sockets. The mptcp ULP extension relies on ensuring that sk-sksockkern is set correctly. This prevents the call to setsockoptfd, IPPROTOTCP, TCPULP, "mptcp", 6 from working for pla...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A issue was discovered in the Linux kernel before version 5.19.16. Attackers who were able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in the net/mac80211/scan.c file...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: brcmfmac: fixed the trace warning for 802.1X-SHA256 calls. When using wpaauth in 1x256 mode, it is necessary to set “usefwsup” with BRCMFPROFILEFWSUP1X. Otherwise, a trace warning will occur when calling...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath6kl – Fix for OOB read from the firmware’ nummsg field in the TX complete handler The firmware-controlled nummsg field u8, 0-255 affects the loop in ath6klwmitxcompleteeventrx, without any validation against the buffer...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: can: isotp: Serialize TX state transitions under so-rxlock. The TX state machine so-tx.state is controlled by three contexts: 1. sendmsg claims and progresses a transfer; 2. the RX path handles Flow Control/echo frames; 3. two...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: armffa: A NULL dereference in ffapartitioninfoget was fixed. The ffapartitioninfoget function passes uuidstr directly to uuidParse, without a NULL check. When a NULL value is passed as an argument, uuidParse calls...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM – Increasing asidgeneration on CPUs when they are online to avoid ASID collisions after hotplugging. If a vCPU remains scheduled or blocked while the last pCPU it ran on goes through a hotplugging cycle...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: In at76c50x-usb, avoid length underflow in at76guessfreq. at76guessfreq only checks that the received frame contains at least a bare 802.11 header 24 bytes, before subtracting the fixed management-body offset: len -= eloff;...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed the issue of BO-pin leaking in amdgpubocreatereserved. The amdgpubocreatereserved function only allocates a new BO when boptr struct amdgpubo boptr as the input parameter is NULL. If boptr is not NULL, the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Invoking pmgenpdremove before freeing genpd. The function pmgenpdremove is called to unregister the module from the global list before releasing the acpgenpd memory. Additionally, the pointer after freeing the memory ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: cfg80211: Cancel sched scan results work on unregister The cfg80211schedscanresults function can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “Revert ‘thermal/drivers/hwmon: Cleanup coding style a bit’” The commit 030a48b0f6ce “thermal/drivers/hwmon: Cleanup coding style a bit” introduced a use-after-free in the error path of thermaladdHWMonsysfs, by removing a valid...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Zero the Tile State Data Array TSDA before each BIN job. The binner BO consists of a single 16MB buffer, divided into 512KB slots. These slots are allocated to jobs at submission time and are recycled as jobs complete. T...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775-core Fixed the number of temperature registers for NCT6116. Unlike NCT6106, NCT6116 only has three temperature registers, and there are also only three temperature source and temperature source configuration...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: The size of the DRAWPRIMITIVES header is validated before division is performed. The vmwcmddraw function calculates: maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is of type u32 and is directly...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: The size of the bound DMA command body was incorrect when calculating the suffix pointer. The vmwcmddma function determines the DMA suffix as follows: unsigned long &cmd-body + header-size - sizeofsuffix However, it...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fixed corruption of swap entries when clearing uffd-wp during fork. The copyhugetlbpagerange function clears the uffd-wp bit from migration and hwpoison entries using hugepteclearuffdwp, which operates on the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fixed a NULL pointer dereference in the RX SA delete check. The qlachkedifrxsadeletepending function obtains the SCSI command via GETCMDSPsp and immediately dereferences cmd-scdatadirection. This command...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/panel-edp: fixed the issue where the i2c adapter caused a leak during probe failures. Ensure that the reference to the i2c adapter is dropped during probe failures e.g., probe delays and also during the driver unbinding...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - media: cx23885: Cancel the NetUP CI work before termination. - netupciexit frees the netupcistate when its work item is freed. However, netupreadcistatus may still be pending or running on the system’s workqueue. The worker...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: Change kmalloc to kzalloc The kmalloc calls in usbmdc800init, for irqurbbuffer and downloadurbbuffer, have been changed to kzalloc. This prevents potential stack leaks if a shorter message is received in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915 – Fixed the issue where the ext PHY was freed after a register error occurred. After the mt7915registerextPhy function succeeded, there was a failure in the main PHY-related functions like mt7915initDebugFs or...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Thermal: Intel: int3400 – Cleanup of ODVP files in case of probe failures. The evaluateodvp function creates sysfs files per ODVP before the thermal zone and probe resources are registered. The current unwind path only calls...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: speakup: keyhelp: The guard-letteroffsets might result in out-of-range indexing. helpinit builds the letteroffsets array by using the first byte of each function name as an index through start & 31 - 1. If function names are...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoiding soft lockup when using mprotect on a large memory area When calling mprotect on a large hugetlb memory area in our customer’s workload 300GB of hugetlb memory, soft lockup was observed: watchdog: BUG: soft...

Astra Linux – Vulnerability in Ruby 2.5

The attack vector is a potential Denial of Service DoS attack. The vulnerability arises from an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can create a malicious DNS packet containing a highly compressed domain name. When the resolv library...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: In rtlwifi, memory leaks and invalid access at the probe error path have been fixed. The deinitialization is performed in reverse order when the probe fails. When initswvars fails, rtldeinitcore should not be called. Thi...

Astra Linux – Vulnerability in unbound

Before version 1.9.5, Unbound allowed for an integer overflow in sldnsstr2wirednamebuforigin, resulting in an out-of-bounds write. NOTE: The vendor denies that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

Astra Linux – Vulnerability in unbound

Unbound before version 1.9.5 allows for an integer overflow in the regional allocator through regionalalloc. NOTE: The vendor denies that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be exploited remotely or locally...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intelpstate: A issue related to the object lifecycle was fixed in updateqosrequest. The cpufreqcpuput call in updateqosrequest occurs too early. This is because updateqosrequest subsequently calls freqqosupdaterequest,...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel versions 5.8 through 5.19.x, prior to 5.19.16, local attackers who were able to inject WLAN frames into the mac80211 stack could carry out a NULL pointer dereferencing denial-of-service attack against the beacon protection of P2P devices...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netsched: hfsc: Fixed a potential UAF in hfscdequeue. Similarly to the previous patch, we also need to properly protect hfscdequeue. However, for this issue, we do not have a reliable way to reproduce the problem...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath11k: A NULL pointer dereference occurred in ath11khalsrngaccessbegin. In ATH11KQMIEVENTFWREADY, the field ATH11KFLAGREGISTERED is set unconditionally, even when ath11kcoreqmifirmwareready fails. This leaves the driver in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: A potential memory leak in ipw2100pciinitone has been fixed. The memory allocated in the ipw2100allocdevice function is not freed in some error paths of ipw2100pciinitone. This issue was addressed by converting the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: brmfcmac – Initialize SDIO data operations before cleanup. The brcmfsdioprobe function stores the newly allocated bus in sdiodev-bus before allocating the ordered workqueue. If this allocation fails, the function jumps to t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfmac – Make releasescratchbuffers idempotent The function brcmfpciereleasescratchbuffers frees the shared.scratch and shared.ringupd DMA buffers using dmafreecoherent. However, it does not clear the pointers afterward,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: freeing stranded TX buffers on ring deinit The aqvecdeinit function drains the TX rings with a single aqringtxclean call. This frees at most AQCFGTXCLEANBUDGET 256 descriptors. However, the reference to hwhead...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: qede: Synchronization of UDP tunnel ports outside the qedelock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured affects the rtnetlink control plane of the entire machine: NETDEV...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ALSA: usb-audio: fixed OOB write operations on Type II inbound URBs In the dataepsetparams function, the size of each URB transfer buffer is calculated before adding the Format Type II transfer delimiter: u-packets = urbpacks;...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix for board ID over-reading issue The EEPROM board ID is a fixed 13-byte field, and it is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput treats it as a C string, which ma...