Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Do not call BUGON on an invalid journal dinode. BUG A corrupted OCFS2 image can corrupt the current slot journal dinode while mounting is still in progress. The mount path first reports the invalid journal block and then...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: Multitouch: fixed an out-of-bounds bit access in mtioflags mtioFlags is a single unsigned long variable, but functions like mtprocessSlot, mtreleasePendingPalms, and mtreleaseContacts use it as a per-slot bitmap indexed by t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu – fixed the potential infinite loop in CDC union descriptor parsing. The driver parses CDC union descriptors in imspcugetcdcuniondesc, by iterating through the extra descriptor data. However, it does not verify tha...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fixed a page overflow in sevdbgcrypt for the ENCRYPT path. In sevdbgcrypt, the per-iteration transfer length is bounded by the source page offset PAGESIZE - soff, but not by the destination page offset PAGESIZE - doff...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: mac80211: In the case of APVLAN, the free APVLAN bcbuf SKBs outside IRQ lock operation is performed. The ieee80211dostop function removes APVLAN packets from the parent AP. This occurs while holding ps-bcbuf.lock with IR...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/802/mrp: Fixed the parsing of vector attributes in mrppduparsevecattr. In mrppduparsevecattr, vector attribute events are encoded three per byte, and valen tracks the number of events remaining to be processed. The parser...

Astra Linux – Vulnerability in binutils

It has been discovered that GNU Binutils prior to version 2.40 contains a memory leak vulnerability in the findabstractinstance function in dwarf2.c...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: In at76c50x-usb, avoid length underflow in at76guessfreq. at76guessfreq only checks that the received frame contains at least a bare 802.11 header 24 bytes, before subtracting the fixed management-body offset: len -= eloff;...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: In evdev, it is necessary to sanitize the event type index when fetching event masks. The event type index provided by the user and passed to EVIOCGMASK/EVIOCSMASK is used to index the static counts array in evdevgetmaskcn...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ntfs3: cap RESTARTTABLE free-chain walker at rt-used A crafted NTFS3 disk image triggers an infinite loop in the kernel during mounting. This causes the mounting thread to hang, and the soft-lockup watchdog to trigger within 22...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: fsl: fslaudmix: Validates written enum values. fslaudmixputmixclksrc and fslaudmixputoutsrc convert the user-provided enum items using sndsocenumitemtoval, before checking whether the item is within the enum’s item count...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the rtl2832 module, a use-after-free issue has been addressed in the rtl2832remove function. The canceldelayedworksync function is called before i2cmuxdeladapters in rtl2832remove. While the cancellation process waits for any...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mac802154: Remove interfaces with RCU list deletion. Queue wake, stop, and disable path walk local-interfaces under RCU. The bulk hardware teardown process removes entries using listdel; therefore, an asynchronous transmit...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In the SCO process, the hold operation of sk should be properly handled in scoconnready. The dereferencing of sk in scoconnready must be done either under conn-lock, or while holding a reference count, to avoid...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate qrnumregions in dlmmatchregions Patch series: “ocfs2/dlm: fix two bugs in dlmmatchregions” In dlmmatchregions, the qrnumregions field from a DLMQUERYREGION network message is used to iterate over the qrregions...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: USB: ldusb: fixed a use-after-free issue during disconnection handling. The mutexunlock function may access the mutex structure after releasing the lock. Therefore, it cannot be used to directly manage the lifetime of objects...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: tipc: Fixed a use-after-free of the discoverer in tipcdiscrcv. bearerdisable frees b-disc using tipcdiscdelete’s plain kfree, but tipcdiscrcv still dereferences b-disc in the RX softirq under rcureadlock tipcudprecv - tipcrcv ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu/gfx10: replace BUGON with WARNON There is no need to crash the kernel in these cases. Cherry-picked from commit ac6f00beb658239bced4aaed9efbb04a35348d48...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevents OGM aggregation on disabled hardware interfaces. When an interface is disabled, the worker is correctly disabled via batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: A potential buffer underflow has been fixed in ath11khalrxmsdulistget. When the first entry in msdudetails has a zero buffer address, the code accesses msdudetailsi - 1 when i == 0, resulting in a buffer underflow...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: defio: Disconnect deferred I/O from the lifetime of struct fbinfo. Hold the state of deferred I/O in struct fbdeferrediostate. Allocate an instance as part of initializing deferred I/O and remove it only after the final...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Tracing: Fixed a resource leak when closing the mmiotrace tracepipe. The mmiotrace tracer was added on May 12th, 2008. At that time, resources created by pipeopen could not be freed because there was no pointer to the pipeclose...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: broadsheetfb: A potential memory leak has been fixed in broadsheetfbprobe. The memory allocated for pagerefs in fbdeferredioinit is not freed during the error path. This issue was addressed by calling fbdeferrediocleanup...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cifs: Fixed an integer overflow during the processing of the acregmax mount option. The user-provided mount parameter acregmax, of type u32, is intended to have an upper limit. However, before it is validated, the value is...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix module reference leak A reference to the carrier module was taken every time it was used, but it was only released once, when the final reference to the tty struct was removed. This issue was fixed by taking t...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: core: Fixed a use-after-free in sndsocexit. KASAN reported a use-after-free: BUG: KASAN: Use-after-free in devicedel+0xb5b/0xc60. A read of size 8 at address ffff888008655050 was performed by the task rmmod/387. CPU: 2;...

Astra Linux – Vulnerability in python-psutil

psutil also known as python-psutil from version 5.6.5 onwards may have a double-free issue. This issue occurs due to improper handling of reference counts within a while loop or for loop, which converts system data into a Python object...

Astra Linux – Vulnerability in Tomcat9

DEPRECATED: There is a vulnerability related to authentication bypass in digest authentication in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-M1 through 11.0.21, 10.1.0-M1 through 10.1.54, 9.0.0.M1 through 9.0.117, 8.5.0 through 8.5.100, and versions prior to 7.0.0...

Astra Linux – Vulnerability in Apache2

Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL. This enables the attacker to execute code or disclose...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: NFC: Digital: Fixed a possible memory leak in digitaltglistenmdaa. The variable ‘params’ is allocated in digitaltglistenmdaa, but it is not freed when digitalsendcmd fails. This could lead to a memory leak. The issue is fixed by...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: TCP: IPv6: Clamping the default advertising MSS to avoid GSOBYFRAGS 0xFFFF. When the MTU is large, ip6defaultadvmss may return IPV6MAXPLEN 65535. This is interpreted by TCP as “mssclamp”, allowing the MSS to reach 65535. However,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nfttunnel: fix use-after-free on object destroy The nfttunnelobjdestroy function calls metadatadstfree, which directly kfrees the metadatadst, ignoring the refcount of dstentry. Packets that relied on the dsthold...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: The bound NTFSDEdeview.dataoff was bound in UpdateRecordDataRoot,Allocation. In the UpdateRecordDataRoot fslog.c:3489 and UpdateRecordDataAllocation fslog.c:3697 functions, the destination of the memmove operation is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Ceph: The dadd function only adds entries to negative dentries when they are not already present in the primary dcache hash. Ceph may call dadddentry, NULL on a negative dentry that already exists in the primary dcache hash. This...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: Fixed a refcount leak in the isfullcharged function. In isfullcharged, the powersupplygetbyname function is called to obtain a reference to the fuelgauge power supply. If the voltage check uV =...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: A use-after-free issue was fixed in rxemmap. The rxemmap function removes an rxemmapinfo structure from the pendingmmaps list and releases the pendinglock while the kref of the structure is still set to 1: c...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtw88 – Check whether a PCI upstream bridge exists. The pciupstreambridge function returns NULL if the device is on a root bus. If 8821CE is installed in the system with such a PCI topology, the probing routine will crash...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Tunnels: Do not assume the transport header in iptunnelpmtudcheckicmp In some cases, iptunnelpmtudcheckicmp can be called while the skb transport header is not set. This triggers an out-of-bound access, because...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: The fbnewmodelist function has been fixed to prevent a nullptrderef in fbvideomodetovar. info-var, which represents the current mode of a framebuffer, is expected to have a matching entry in info-modelist. The vartodisplay...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: When the MAC endpoint device is disconnected, it should be removed properly. The function fslmcgetendpoint returns the MAC endpoint device using the devicefindchild function. The switch port’s connection path stores...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nfsd: resetting the write verifier for deferred writeback errors Both nfsdvfswrite and nfsdcommit call filemapcheckwberr to detect deferred writeback errors. However, neither rotates the server’s write verifier nn-writeverf wh...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt – Fixed handling of MAYBACKLOG requests MayBACKLOG requests can return the error code EBUSY. This issue was addressed by checking for that value and filtering out EINPROGRESS notifications...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: The vividupdateformatcap/out functions must only be called if the capture/output queue is not busy. However, these functions are not checked for in controls that select the CROP/COMPOSE/SCALE capability. Only when streaming start...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: qat – validates the lengths of RSA CRT components The generic RSA key parser rsahelper.c limits the length of each CRT component p, q, dp, dq, qinv to the modulus size nsz. However, the function qatrsasetkeycrt allocates...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: cfg80211: Cancel sched scan results work on unregister The cfg80211schedscanresults function can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: f2fs: Validated the sizes of ACL entries in f2fsaclfromdisk. f2fsaclcount only validates the aggregate ACL xattr length. A malformed ACL can still place ACLUSER or ACLGROUP in a slot that only contains struct f2fsaclentryshort...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iommu/intel: Fixed an out-of-bounds memset in dmarlatencydisable. The dmarlatencydisable function is intended to set only the single latencystatistic entry for the given type. However, the memset size was calculated as sizeoflsta...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: The shared page is not zeroed before being exposed to user space. The bnxtreallocucontext function allocates uctx-shpg using getfreepageGFPKERNEL. The buddy allocator does not zero pages without the GFPZERO parameter...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fixed an integer overflow in the immediate data length check. immbuf-len is a user-controlled uint32t value received from the network. Adding this value to immdataoffset without overflow checking allows a malicious...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten the checks for cgroup storage cookies for prog arrays The fix contained in commit abad3d0bad72 “bpf: Fix oob access in cgroup local storage” is still incomplete. The compatibility check for prog arrays treats a progr...