Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: Protect memcgpath calls using damonsysfslock. The patch addresses the issue where reading and writing files named memcgpath in the DAMON sysfs interface can occur simultaneously with writing operations,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mptcp: Do not account for OoO in mptcprcvbufgrow. TCP Multicasting overheads OoOs occur physiologically when multiple subflows are active simultaneously. These overheads do not cause retransmissions and are not triggered by drops...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: eventfs: It was necessary to hold the eventfsmutex and SRCU when remounting events. The commit 340f0c7067a9 “eventfs: Update all the eventfsinodes from the events descriptor” had eventfsset attrs recursively traversing ei-childre...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: vmalloc: A buffer overflow issue in vreallocnode Align was fixed. The commit 4c5d3365882d “mm/vmalloc: allowing to set the node and align in vrealloc” added the capability to force a new allocation if the current pointer is on th...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: Fixed the conversion from iova to va for MR page sizes that are not equal to PAGESIZE. The current implementation improperly handles memory regions MRs with page sizes that differ from the system’s PAGESIZE. The core...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Rejects non-8-byte ATOMICWRITE payloads. In the atomicwritereply function in drivers/infiniband/sw/rxe/rxeresp.c, the payloadaddrpkt parameter is dereferenced unconditionally with a value of 8 bytes. Previously, checkrk...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix RTNL assertion warning when removing a module For the copper NIC with an external PHY, the driver calls phylinkconnectPhy during probe and phylinkdisconnectPhy during module removal. This caused an RTNL assertion...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/mana: Fixed the cleanup in manaDestroywqobj within manaibcreateqprss. Sashiko pointed out that there are two bugs in the error unwinding process, both related to how the WQ table is unwound. Firstly, there is a double i--...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/xe: Fixed a memory leak in xedmabufinitobj when allocation failure occurs. When drmgpuvmresvobjectalloc fails, the pre-allocated memory is not freed. Added a call to xebofreestorage before returning an error. xedmabufinito...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fixed a reference leak in usbdev on probe failure The createcard function takes a reference to the USB device using usbgetdev, and stores the corresponding usbputdev in cardfree, which is installed as the destructor...

Astra Linux – Vulnerability in Linux 5.10

A NULL pointer dereference flaw was discovered in the Linux kernel’s Amateur Radio AX.25 protocol functionality, regarding the way a user connects to the protocol. This flaw allows a local user to crash the system...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: LoongArch: Fixed a potential ADE in loongsongpufixupdmahang. The switch case in loongsongpufixupdmahang may not execute DC2 or DC3. Additionally, the readlcrtcreg instruction will access memory at a random address. This issue...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etr: Fixed a race condition between sysfs and perf modes. When attempting to run both perf and sysfs modes simultaneously, the WARNON function in tmcetrenablehw was sometimes triggered. WARNING: CPU: 42 PID: 391157...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: This issue prevents OOB reads during IB parsing. The IB parsing mechanism has been updated to use amdgpuibgetvalue, which handles the bounds checks...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access The register WXCFGPORTST is a PF restricted register. When initializing a VF, attempting to read this register triggers an illegal register access, which can cause the system to hang. Wh...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: nau8821: Cancel delayed work on component removal Attempting to unload the driver while a jack detection task is pending may cause the kernel to crash when it is eventually executed. 1984.896308 BUG: Unable to handle a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: Protect the kfree function with damonsysfslock. The damonsysfsquotgoal-path can be read and written by users via the sysfs 'path' file. It can also be indirectly read, for the parameters committed to DAMON...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: arm64: Reassign the nestedmmus array to another location after mmulock The kvm-arch.nestedmmus array is processed under kvm-mmulock, including through the MMU notifier path kvmunmapgfnrange - kvmnesteds2unmap. This proces...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: afunix: Fixed a memory leak in newsk during unixstreamconnect. When preparepeercred fails in unixstreamconnect, unixreleasesock is not called for newsk, resulting in memory leakage. We have moved preparepeercred before unixcreate...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches that may include a vulnerability involving NULL pointer dereferencing in the handling of AppArmor notifications. This bug can be triggered by an unprivileged local user, and it can lead to a kernel oops...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: It is possible for NULL to be returned early from allocfrozenpagesnolock in NMI on UP kernels. On UP kernels with CONFIGSMP, spintrylock is a no-op that succeeds unconditionally, even when the lock is already held. ...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - block: Fixed a issue where rq-qos\donebio was skipped if BIOTRACKED was not set. As a result, bioendio now skips rqqosdonebio if BIOTRACKED is not set. While this fixed a potential error, it also caused issues with blk-iocos...

Astra Linux – Vulnerability in dnsmasq

A buffer overflow in the dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response. This enables extractname to advance the pointer past the end of the record...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: Fixed a self-deadlock issue when releasing tunnel ports. Vports are used concurrently and are protected by RCU. Therefore, netdevput must be called after the RCU grace period. This can happen either during a R...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches that fail to validate invalid sizes of the name field in AppAmor notification responses. This bug can be triggered by an unprivileged local user, and it could lead to the processing of malicious responses...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: leds: qcom-lpg – Check for array overflow when selecting high-resolution values. When selecting high-resolution values from an array, the FIELDGET function is used to retrieve data from a 3-bit register. However, the array being...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Input: edt-ft5x06 – fixed the use-of-memory issue during the debugfs teardown process. The commit 68743c500c6e “Input: edt-ft5x06 – used per-client debugfs directory” removed the manual debugfs teardown process, relying on the I2...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: power: supply: pf1550: Fixed a use-after-free in powersupplychanged. Using the devm variant for requesting IRQs before using the devm variant for allocating/registering the powersupply handle means that the powersupply handle wil...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path, it was confirmed that isp-psys is an error pointer that is not NULL. Therefore, this condition is true, and the error pointer is dereferenced. Thus, isp-psys shoul...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fixed NULL dereferencing on driver unbind. A change that moved DMA channel allocation from probe back to s3c64xxspipreparetransfer failed to remove the corresponding deallocation from remove. The bogus DMA channel...

Astra Linux – Vulnerability in Intel Microcode

Insufficient control flow management in some IntelR processors may allow an authenticated user to potentially enable a denial of service via local access...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fixed the issue with mlx5ibgethwstats when used for devices. Currently, when mlx5ibgethwstats is used for a device where portnum = 0, there is a special handling to ensure that the correct counters are used. However,...

Astra Linux – Vulnerability in Linux 5.15

A issue was discovered in ksmbd within the Linux kernel versions 5.15 through 5.18, prior to 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case of smb2write...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel through version 5.10.1, as used with Xen up to version 4.14.x. The Linux kernel’s PV block backend expects the kernel thread handler to reset ring-xenblkd to NULL when the thread is stopped. However, the handler may not have enough time to execute if the...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel before version 5.8.10. The file virt/kvm/kvmmain.c contains a memory leak in kvmiobusunregisterdev due to a kmalloc failure, identified as CID-f65886606c2d...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxrproc: The issue of a refcount leak in imxrprocaddrinit has been fixed. Since the ofparsephandle function returns a node pointer with a refcount incremented, we should use ofnodeput on it when it is no longer neede...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain AppArmor patches that incorrectly validate the size of an internal structure, resulting in a out-of-bounds read in the notification handling code. This bug can be triggered by an unprivileged local user, and it can lead to information disclosure from adjace...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches that may include a NULL pointer dereferencing issue in the handling of AFINET/AFINET6 socket mediation. This bug can be triggered by an unprivileged local user, and it can lead to a kernel oops...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 – “Unregister” is only available for algorithms. EIP93 has an options register. This register indicates which crypto algorithms are implemented in silicon. Supported algorithms are registered based on...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5e: Fixed deadlocks between the devlink lock and the netdev instance lock. In the mentioned “Fixes” commit, various tasks that triggered the devlink health reporter recovery were changed to use netdevtrylock to prevent...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: cifs: fixed a potential double-free operation during a failed mount. RHBZ: https://bugzilla.redhat.com/showbug.cgi?id=2088799...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Skipping the “reserved bytes” warning after unmounting after a log cleanup failure. After the recent changes made by commit c2e39305299f01 “btrfs: clearing the extent buffer when writing fails” and its follow-up fix,...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fixed premature hardware access after a PCI error After a recoverable PCI error is detected and resolved, the qla driver needs to check whether the error condition still exists and/or wait for the operating syst...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: crypto: qat – fix for the failure in cleaning up IRQs on the 6xxx probe. When the adfdevup function partially completes and then fails, the IRQ handlers registered during the adfisrresourcealloc function are not detached before t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: The issue in mcprobe involves a devicenode leak. The ofparsephandle function returns a devicenode reference, which must be released using ofnodeput. In the original code, r5corenode was never freed at any exit...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: GPIB: A memory leak has been fixed in niusbinit. In niusbinit, if niusbsetupinit fails, the function returns -EFAULT without freeing the allocated write buffer, resulting in a memory leak. Additionally, niusbsetupinit returns 0...

Astra Linux – Vulnerability in Intel Microcode

Access to certain resources under complex microarchitectural conditions in the memory subsystem of some Intel AtomR processors may allow authenticated users to potentially disclose information or cause a denial of service through network access...

Astra Linux – Vulnerability in Intel Microcode

The improper removal of sensitive information before storage or transfer in some IntelR processors may allow an authenticated user to potentially enable information disclosure via local access...

Astra Linux – Vulnerability in Intel Microcode

The sequence of processor instructions in IntelR CoreTM Ultra Processors may lead to unexpected behaviors. This could potentially allow an authenticated user to enable denial of service through local access...

Astra Linux – Vulnerability in amd64-microcode

Secure Encrypted Virtualization SEV on the Advanced Micro Devices AMD Platform Security Processor PSP; also known as AMD Secure Processor or AMD-SP 0.17 build 11 and earlier has an insecure cryptographic implementation...