Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8 contains SAUCE patches that include a potential NULL pointer dereferencing issue in the handling of AppArmor notifications. This bug can be triggered by an unprivileged local user, and it can lead to a kernel panic...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fixed handling of connection failures In cases where immediate MPA Media Plane API request processing fails, the newly created endpoint unlinks from the listening endpoint and becomes ready to be dropped. This special...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fixed NULL pointer access issues. This patch ensures that the UCSI driver waits for all pending tasks in the ucsidisplayportwork workqueue to complete execution before proceeding with the partner...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fixing the deletion race condition A system crash occurs when using the debug kernel due to corruption of the link list. The cause of the link list corruption is that session deletion was allowed to be queued...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: platform: allegro-dvt: Fixed a possible memory leak in allocatebuffersinternal. The buffer within the loop should be released under the exception path; otherwise, a memory leak may occur. To mitigate this issue, release th...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: Check the packet for fixup for true limits. If a device sends a packet that lies between 0 and sizeofu64, the value passed to skbtrim as the packet length will wrap around, resulting in a very large value. The driver...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-mt: fixed a possible memory leak when the module exits. After committing 1fa5ae857bb1 “driver core: removed the struct device’s busid string array”, the name of the device is allocated dynamically. This allocation needs...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fixed the race condition in agent registration for HV VHCA stats The mlx5ehvvhcastatscreate function registers the stats agent through mlx5hvvhcaagentcreate. The helper function publishes the agent in hvvhca-agentstype...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fixed an out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess calculates the local store offset as address - vma-vmstart, but checks the bounds against vma-vmend instead of the local store size. On 64-bit...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Staging: vmeuser: Fixed the issue of leaking the location monitor in the tsi148 bridge. The tsi148probe function allocates a location monitor resource and links it to tsi148bridge-lmresources. The probe error path frees this list...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schhfsc: Do not make a class passive twice The updatevf function is called from two places for the same class during a single dequeue when the class’s child qdisc e.g., codel/fqcodel drops its last packets while...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: irqchip/ts4800: Fixed the issue where missing cleanup of the chained handler was not performed during removal. The driver installs a chained handler for the parent interrupt during the probe using irqsetchainedhandleranddata...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: Check the return value of sndctlnew1. sndctlnew1 may return NULL when memory allocation fails. sndes1938mixer does not check the return value before dereferencing the pointer, which can lead to a NULL pointer being...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Socket creation is restricted to the initial network namespace. The QRTR protocol retains its entire port and node state in module-global variables that are not partitioned per network namespace. For example,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the usb:gadget:ffs subsystem, the initializeResetworkat Allocationtime function is called during the initialization of ffsdata. The ffsfskillsb function cancelworksync on ffs-resetwork when a functionfs instance is unmounted...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: MGMT: Fixed an issue where the cleanup of failed adv monitors was not performed properly. The hciaddadvmonitor function publishes a new advmonitor in hdev-advmonitorsidr before the powered MSFT setup step. The MSFT...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: cn10k – Restricted VF LMTLINE sharing to its own PF. rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read the physical base address of another function’s LMTLINE and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevented a malicious dereference in tsi721dbdpc. In a listforeach loop, if we do not find the item we are looking for in the list, then the loop exits with the iterator, which points to invalid memory. This code...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in controlupdate size calc In sofipc3controlupdate, the expectedsize calculation uses cdata-numelems provided by the firmware in its arithmetic operations. This could lead to an overfl...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated. We need to explicitly check the length; otherwise, we might pass a string with a non-null termination to requestmodule...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: can: bcm: fixed the race condition involving lockless operations on bo-bound and bo-ifindex, as well as the silent failure during RXSETUP. The bcmsendmsg function reads the values of bo-ifindex and checks bo-bound before...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: udf: The validation of the sparing table length is performed based on the number of entries, not the number of bytes. The udfloadsparablemap function accepts a sparing table when the condition sizeofst +...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fixed a memory leak that occurred during registration failures. The allocated device name is never released when there are registration failures with early ULPI devices. This issue was addressed by initializing the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: The capacity of the Dirty Page Table is validated during the logreplay copylcns operation. During the analysis phase of the $LogFile journal replay process, logreplay copies LCNs from each action log record into an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: i2c: imx: fixed the issue where the bus gets locked during block-read operations on SMBus with a count of 0 atomic operation. SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects this...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: geneve: It is required that CAPNETADMIN is set in the device’s netns for the changelink function. A tunnel changelink operates on at most two netns: devnetdev and the sticky underlay netns geneve-net. These differences arise...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: selinux: Avoid dereferencing sksocket in selinuxsctpbindconnect. selinuxsctpbindconnect dereferences sk-sksocket to pass a struct socket to selinuxsocketbind and selinuxsocketconnecthelper. However, when the hook is invoked fr...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: gpio: mt7621: Avoid corruption of the shared interrupt trigger state. Bank-shared fields such as ‘rising’ and ‘falling’ are modified using non-atomic read-modify-write operations. Since each gpio chip instance represents a whole...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: kcm: Use WRITEONCE when changing lower-level socket callbacks. The kcmattach function replaces the skdataready and skwritespace callbacks of a live lower-level TCP socket with KCM handlers. The kcmunattach function restores...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/mminit: Fixed the issue where uninitialized struct pages were used for ZONEDEVICE. If DAX memory is hot-plugged into an unoccupied subsection of an early section, sectionactivate reuses the unoptimized boot memmap. However,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: comediparport: handling premature interrupts. Syzbot reported a general protection fault in comedigetissubdevicerunning, which was called from the interrupt handler parportinterrupt in the “comediparport” driver. However, there i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: prevents unbounded recursion in offload rollback Quan Sun reported 1 a stack overflow in clsbpfoffloadcmd. Reproducer on netdevsim: added a skipsw clsbpf filter, set the bpftcaccept debugfs knob to 0, then used...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: hdlcppp: Synchronization of per-protocol timers before freeing the hdlc state Each PPP control protocol LCP/IPCP/IPV6CP embedded in struct ppp registers a timer via timersetup. This struct ppp represents the hdlc-state allocation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: libceph: The decoding of the “bound getversion reply” was incorrect. The handlegetversionreply function uses msg-frontalloclen as the boundary for decoding MONGETVERSIONREPLY. This represents the size of the reused reply buffer,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Staging: rtl8723bs: Fixed an issue where the OOB read was performed in the updatebeaconinfo function’s IE loop. The IE parsing loop in updatebeaconinfo advances by pIE-length + 2 with each iteration, but it only checks that i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fixed a UAF Uninitialized Address Fault in the pending keyuptimer routine in remove. The appleirremove function runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input device via...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9k: hifusb: Do not dereference hifdev after re-arming the firmware request The ath9khifrequestfirmware function re-arms an asynchronous firmware load via requestfirmwarenowait, passing hifdev as the completion context...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Firmware: stratix10-svc – Fixed memory leaks and list corruption issues. A memory leak was addressed when genpoolalloc failed, by freeing the allocated memory at the error path. The memory allocation mechanism was changed from...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight – the sample count was bound to the packet payload. isightpacket extracts the frame count from the device’s ISO packet and checks it only against the claimed ISO length of the device. count =...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: A memory leak has been fixed in the ieee80211registerhw function. If kmemdup fails while copying supported band structures, the error path jumps to failrate. This bypasses ratecontroldeinitialize and results in th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Invoking pmgenpdremove before freeing genpd. The function pmgenpdremove is called to unregister the module from the global list before releasing the acpgenpd memory. Additionally, the pointer after freeing the memory ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8 intercepts, get vmcs12 if and only if the vCPU is in guest mode, so that future changes can update CR8 intercepts during vCPU creation,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KEYS: The overflow issue in keyctlpkeyparamsget2 has been fixed. The length of the internal output buffer was calculated incorrectly, which can lead to an overflow if a too-small buffer is provided. This bug has been fixed by...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fixed hard lockup issues upon disconnection. If the OOB write Urb submission fails persistently e.g., if the device is being disconnected, the driver may loop indefinitely with interrupts disabled...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension during context creation, an error during the processing of the next user extension causes the siblings array to be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Staging: rtl8723bs: Fixed an issue where the OOB read was performed in the IE parsing loop during OnAssocRsp. The IE parsing loop in OnAssocRsp advances by pIE-length + 2 with each iteration, but it only checks for i length fr...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Firewire: In the network layer, there is a fix for fragmented datagram reassembly. The function fwnetfragnew maintains a sorted list of received fragments for a partial datagram. When a new fragment is adjacent to an existing...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fixed handling of AIF enable without AISB When a guest attempts to register IRQs without a summary bit specified, ensure that the associated GAITE stores 0 for the guest AISB location, instead of...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid moving extents to occupied clusters. For non-auto OCFS2IOCMOVEEXT operations, the user space provides a physical megoal. ocfs2moveextent initializes newphyscpos from that goal and expects ocfs2probeallocgroup to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xprtrdma: Repost Receive buffers for malformed replies The rpcrdmawcreceive function decrements the transport’s Receive count for each incomplete reply before dispatching a successful Receive to rpcrdmareplyhandler. The handle...