Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: The capacity of the Dirty Page Table is validated during the logreplay copylcns operation. During the analysis phase of the $LogFile journal replay process, logreplay copies LCNs from each action log record into an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: i2c: imx: fixed the issue where the bus gets locked during block-read operations on SMBus with a count of 0 atomic operation. SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects this...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: geneve: It is required that CAPNETADMIN is set in the device’s netns for the changelink function. A tunnel changelink operates on at most two netns: devnetdev and the sticky underlay netns geneve-net. These differences arise...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: selinux: Avoid dereferencing sksocket in selinuxsctpbindconnect. selinuxsctpbindconnect dereferences sk-sksocket to pass a struct socket to selinuxsocketbind and selinuxsocketconnecthelper. However, when the hook is invoked fr...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: gpio: mt7621: Avoid corruption of the shared interrupt trigger state. Bank-shared fields such as ‘rising’ and ‘falling’ are modified using non-atomic read-modify-write operations. Since each gpio chip instance represents a whole...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: kcm: Use WRITEONCE when changing lower-level socket callbacks. The kcmattach function replaces the skdataready and skwritespace callbacks of a live lower-level TCP socket with KCM handlers. The kcmunattach function restores...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/mminit: Fixed the issue where uninitialized struct pages were used for ZONEDEVICE. If DAX memory is hot-plugged into an unoccupied subsection of an early section, sectionactivate reuses the unoptimized boot memmap. However,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: comediparport: handling premature interrupts. Syzbot reported a general protection fault in comedigetissubdevicerunning, which was called from the interrupt handler parportinterrupt in the “comediparport” driver. However, there i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: prevents unbounded recursion in offload rollback Quan Sun reported 1 a stack overflow in clsbpfoffloadcmd. Reproducer on netdevsim: added a skipsw clsbpf filter, set the bpftcaccept debugfs knob to 0, then used...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: hdlcppp: Synchronization of per-protocol timers before freeing the hdlc state Each PPP control protocol LCP/IPCP/IPV6CP embedded in struct ppp registers a timer via timersetup. This struct ppp represents the hdlc-state allocation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: libceph: The decoding of the “bound getversion reply” was incorrect. The handlegetversionreply function uses msg-frontalloclen as the boundary for decoding MONGETVERSIONREPLY. This represents the size of the reused reply buffer,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Staging: rtl8723bs: Fixed an issue where the OOB read was performed in the updatebeaconinfo function’s IE loop. The IE parsing loop in updatebeaconinfo advances by pIE-length + 2 with each iteration, but it only checks that i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fixed a UAF Uninitialized Address Fault in the pending keyuptimer routine in remove. The appleirremove function runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input device via...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9k: hifusb: Do not dereference hifdev after re-arming the firmware request The ath9khifrequestfirmware function re-arms an asynchronous firmware load via requestfirmwarenowait, passing hifdev as the completion context...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Firmware: stratix10-svc – Fixed memory leaks and list corruption issues. A memory leak was addressed when genpoolalloc failed, by freeing the allocated memory at the error path. The memory allocation mechanism was changed from...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight – the sample count was bound to the packet payload. isightpacket extracts the frame count from the device’s ISO packet and checks it only against the claimed ISO length of the device. count =...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: A memory leak has been fixed in the ieee80211registerhw function. If kmemdup fails while copying supported band structures, the error path jumps to failrate. This bypasses ratecontroldeinitialize and results in th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Invoking pmgenpdremove before freeing genpd. The function pmgenpdremove is called to unregister the module from the global list before releasing the acpgenpd memory. Additionally, the pointer after freeing the memory ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8 intercepts, get vmcs12 if and only if the vCPU is in guest mode, so that future changes can update CR8 intercepts during vCPU creation,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KEYS: The overflow issue in keyctlpkeyparamsget2 has been fixed. The length of the internal output buffer was calculated incorrectly, which can lead to an overflow if a too-small buffer is provided. This bug has been fixed by...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fixed hard lockup issues upon disconnection. If the OOB write Urb submission fails persistently e.g., if the device is being disconnected, the driver may loop indefinitely with interrupts disabled...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension during context creation, an error during the processing of the next user extension causes the siblings array to be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Staging: rtl8723bs: Fixed an issue where the OOB read was performed in the IE parsing loop during OnAssocRsp. The IE parsing loop in OnAssocRsp advances by pIE-length + 2 with each iteration, but it only checks for i length fr...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Firewire: In the network layer, there is a fix for fragmented datagram reassembly. The function fwnetfragnew maintains a sorted list of received fragments for a partial datagram. When a new fragment is adjacent to an existing...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fixed handling of AIF enable without AISB When a guest attempts to register IRQs without a summary bit specified, ensure that the associated GAITE stores 0 for the guest AISB location, instead of...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid moving extents to occupied clusters. For non-auto OCFS2IOCMOVEEXT operations, the user space provides a physical megoal. ocfs2moveextent initializes newphyscpos from that goal and expects ocfs2probeallocgroup to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xprtrdma: Repost Receive buffers for malformed replies The rpcrdmawcreceive function decrements the transport’s Receive count for each incomplete reply before dispatching a successful Receive to rpcrdmareplyhandler. The handle...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Fixed a UAF in dbFreeBits Reported by syzbot ERROR: KASAN: Slab-use-after-free in mutexlockcommon in kernel/locking/mutex.c:587 inline ERROR: KASAN: Slab-use-after-free in mutexlock+0xfe/0xd70 in kernel/locking/mutex.c:75...

Astra Linux – Vulnerability in cjson

It has been discovered that cJSON v1.7.17 contains a segmentation violation, which can occur through the second parameter of the cJSONSetValuestring function in the cJSON.c library...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dmearlycreate: Fixed the issue where freeing the used table during a dmresume failure occurred. If dmresume fails, the kernel attempts to free the table using dmtabledestroy. However, the table was already instantiated with...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The issue of “use-after-free” of conn-preauthinfo in the concurrent SMB2 NEGOTIATE process has been fixed. conn-preauthinfo represents information about a shared connection state struct preauthintegrityinfo, kmalloc-96. Th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fix for a root leak that occurs if the relocation of the root is unexpected in mergerelocroots. If we have an unexpected relocroot for our root, we jump to the out label, but we never release the reference we obtained for...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fixed a use-after-free in tlclkcleanup. This patch improves the module cleanup process in the tlclk driver to prevent potential use-after-free and race conditions. Currently, the fileoperations structure does not...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Regulator: Core: Fixing the locking issue in regulatorresolvesupply error path If late enabling of a supply regulator fails in regulatorresolvesupply, the current code triggers a lockdep warning: WARNING:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Allow access to LPM maps from sleepable BPF programs. trielookupelem annotates its rcudereferencecheck operation with only rcureadlockbhheld. Since rcudereferencecheckp, c resolves to "c || rcureadlockheld, this does not...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: cpufreq: In the pcc module, issues related to use-after-free and double-free operations during OSC evaluations were addressed. The function pcccpufreqdoosc calls acpievaluateobject twice during the two-phase OSC negotiation...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: vfio/mlx5: Fixed issues with bitfields and improved the structure of struct definitions. Bitfield operations are not atomic; they follow a read-modify-write pattern. Therefore, we need to be careful not to pack bitfields that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tipc: Prevent sntunacked underflow on CONNACK The tipcskconnprotorcv function subtracts the connection acknowledgment count provided by the peer from the unsigned 16-bit sntunacked counter, without checking that this count does n...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ntfs3: The function boundtomove is bound to be called in indxinsertintoroot before hdrinserthead. indxinsertintoroot promotes a fully resident $INDEXROOT to $INDEXALLOCATION and copies all non-last resident root entries into a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfmac – Make releasescratchbuffers idempotent The function brcmfpciereleasescratchbuffers frees the shared.scratch and shared.ringupd DMA buffers using dmafreecoherent. However, it does not clear the pointers afterward,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: rejecting a zero filehandle-version count The fflayoutalloclseg function decodes the count of the filehandle-version array from the flexfiles layout body. This value is used as the count for kzallocobjs, and the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fixed the issue where GSO userspace truncation occurred. The OVSACTIONATTRTRUNC field currently stores a delta from the original skb length, stored in OVSCBskb-cutlen. When a later userspace action divides a GSO skb,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path The memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some cases where discoverarenas encounters an error. This leads to memor...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand function is supposed to wait for the write buffer to become available or return an error. However, instead, it updates the transfer buffer and...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Rejects direct userspace writes to reserved $LX xattrs NTFS3 uses $LXUID, $LXGID, $LXMOD, and $LXDEV as internal WSL permission metadata and reloads them into iuid, igid, and imode from the ntfsgetwslperm function. Since t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip – validate skbdst before accessing it. The tc ingress and openvswitch subsystems do not guarantee that routing information will be available. These subsystems rely on the conntrack helper infrastructure,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fixed a race condition during reboot During system reboot, cpufreqsuspend is called via the kernelrestart - deviceshutdown path. Unlike the normal system suspend path, the reboot path does not call freezeprocesses, so...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Rejects non-VALID sessions in the compound request branch. The smb2checkusersession function takes a shortcut for any operation that is not the first in a COMPOUND request. It reuses the work-sess structure the session bou...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: releasing free IRQ resources and draining funcwakenotify before teardown. The Broadcom BDC UDC driver registers its IRQ handler using devmrequestirq in bdcudcinit. Therefore, the IRQ is released by devm onl...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: hwmon: In the line asusatk0110, it is necessary to check the packagecount before accessing elements. The atkecpresent function iterates through the packages in the management group returned by the GGRP ACPI method. For each...