Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: btrfssetheadergeneration must not be moved to after cleantreeblock, because cleantreeblock calls btrfsheadergeneration from commit 55c69072d6bd5be1 “Btrfs: Fix extentbuffer usage when nodesize != leafsize”. In...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: In virtiobt, there is a issue where skbPutskb, len is called before proper validation of len. len comes directly from virtqueuegetbuf, without any validation against the buffer that is posted to the device. The RX skb ...

Astra Linux – Vulnerability in Golang 1.19, Golang 1.23

Archive/Zip uses a super-linear file name indexing algorithm that is invoked the first time a file within an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...

Astra Linux – Vulnerability in Linux

A flaw related to race conditions and incorrect initialization of the process ID was discovered in the Linux kernel’s handling of child/parent process identification during signal handler filtering. A local attacker can exploit this flaw to bypass checks and send any signal to a privileged proces...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: Protect the kfree function with damonsysfslock. The damonsysfsquotgoal-path can be read and written by users via the sysfs 'path' file. It can also be indirectly read, for the parameters committed to DAMON...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: AppArmor: A NULL pointer dereference occurred in unixneedsrevalidation. When receiving file descriptors via SCMRIGHTS, both the socket pointer and the sk pointer of the socket can be NULL during socket setup or teardown, leading ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: smb/client: A out-of-bounds read vulnerability in smb2compoundop has been fixed. If a server sends a truncated response but sets OutputBufferLength to a large value, and terminates the EA Asynchronous Event Loop list early, the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: Remove initconst from gates. Since the commit 8ceff24a754a “clk: mediatek: clk-gate: Refactor mtkclkregistergate to use mtkgate struct”, the mtkgate structures are no longer only used for initialization/registratio...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel through version 5.9.1, as used with Xen up to version 4.14.x. The file drivers/xen/events/eventsbase.c allows for the removal of event channels during the event-handling loop a race condition. This can lead to a use-after-free or NULL pointer...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Fixed error handling in sndprotoprobe. The devicenode pointer is returned by ofparsephandle, with the refcount incremented. We should use ofnodeput on it after that operation. This function only calls ofnodeput in th...

Astra Linux – Vulnerability in Apache2

A out-of-bounds read vulnerability exists in the modproxyajp module of the Apache HTTP Server. This issue affects the Apache HTTP Server version up to 2.4.66. Users are recommended to upgrade to version 2.4.67, as this fix addresses the vulnerability...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Remove the station if connection preparation fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD state. In this case, we must remove the station, as it is...

Astra Linux – Vulnerability in amd64-microcode

Incomplete system memory cleanup in the SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: Fixed the conversion from iova to va for MR page sizes that are not equal to PAGESIZE. The current implementation improperly handles memory regions MRs with page sizes that differ from the system’s PAGESIZE. The core...

Astra Linux – Vulnerability in Linux

The mwifiexcmd80211adhocstart function in the drivers/net/wireless/marvell/mwifiex/join.c file within the Linux kernel, as of version 5.10.4, may allow remote attackers to execute arbitrary code by using a long SSID value, also known as CID-5c455c5ab332...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in GnuTLS. This vulnerability allows for a denial of service attack through excessive CPU usage and memory consumption, caused by specially crafted malicious certificates that contain a large number of name constraints and Subject Alternative Names SANs...

Astra Linux – Vulnerability in Linux

A flaw was discovered in the Linux kernel in versions prior to 5.4.92 regarding the BPF protocol. This flaw allows an attacker with a local account to disclose information about kernel internal addresses. The greatest threat posed by this vulnerability relates to confidentiality...

Astra Linux – Vulnerability in Linux

In the Linux kernel, from drivers/block/nbd.c up to version 5.10.12, there is a use-after-free in the nbdaddsocket function. This issue could be triggered by local attackers who have access to the nbd device. The attack occurs during I/O requests at a certain point in device setup, specifically...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel versions 3.11 through 5.10.16, as used by Xen. When serving requests to the PV backend, the driver maps grant references provided by the frontend. During this process, errors may occur. In one case, an error encountered earlier might be discarded by late...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftinner: Fixed the desynchronization of inner IPv6 headers. In nftinnerparsel2l3, when processing inner IPv6 packets, ipv6findhdr correctly calculates the transport header offset by traversing all extension headers...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: smb: Client: Validate dacloffset before constructing DACL pointers. parsesecdesc, buildsecdesc, and the chown path in idmodetocifsacl all add the dacloffset provided by the server to pntsd before verifying that the DACL header...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: lib/scatterlist: corrected length calculations in extractkvectosg. Patch series “Correct bugs in extractitertosg”, version 3. Bugs have been corrected in both the kvec and user variants of extractitertosg. This series has grow...

Astra Linux – Vulnerability in Linux

In the Bluetooth BR/EDR Core Specification v5.2 and earlier, legacy pairing and secure-connection pairing authentication mechanisms may allow an unauthenticated user to complete the authentication process without using pairing credentials through adjacent access. An unauthenticated, adjacent...

Astra Linux – Vulnerability in Linux

It was discovered that the eBPF implementation in the Linux kernel failed to properly track bound information for 32-bit registers when performing division and modulo operations. A local attacker could use this vulnerability to potentially execute arbitrary code...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 – “Unregister” is only available for algorithms. EIP93 has an options register. This register indicates which crypto algorithms are implemented in silicon. Supported algorithms are registered based on...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: power: supply: pf1550: Fixed a use-after-free in powersupplychanged. Using the devm variant for requesting IRQs before using the devm variant for allocating/registering the powersupply handle means that the powersupply handle wil...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Stopping the IRR scan in kvmapicupdateirr even if PIR is empty The function apicfindhighestvector is used when PID.ON is set, but PIR turns out to be empty. This ensures that the highest pending interrupt from the...

Astra Linux – Vulnerability in Intel Microcode

Improper isolation of shared resources in some IntelR processors may allow a privileged user to potentially enable information disclosure through local access...

Astra Linux – Vulnerability in Intel Microcode

Improper input validation in some IntelR TDX module software prior to version 1.5.05.46.698 may allow a privileged user to potentially enable privilege escalation through local access...

Astra Linux – Vulnerability in Apache2

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server up to version 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes this vulnerability...

Astra Linux – Vulnerability in Linux 5.10

A NULL pointer dereference flaw was discovered in the Linux kernel’s Amateur Radio AX.25 protocol functionality, regarding the way a user connects to the protocol. This flaw allows a local user to crash the system...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: Validate the reply type before using icmppointers. Extended echo replies use ICMPEXTECHOREPLY as the outbound reply type. This value is outside the range covered by icmppointers, which only describes the traditional...

Astra Linux – Vulnerability in Golang-1.23

During the resumption of a session in cryptography/TLS, if the underlying Config has its ClientCAs or RootCAs fields changed between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This can occur when a user calls Config.Clone and...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel through version 5.10.1, as used with Xen up to version 4.14.x. The Linux kernel’s PV block backend expects the kernel thread handler to reset ring-xenblkd to NULL when the thread is stopped. However, the handler may not have enough time to execute if the...

Astra Linux – Vulnerability in Intel Microcode

The removal or modification of security-critical code in certain Intel processors may allow an authenticated user to potentially enable information disclosure through local access...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: octeonep VF: Added NULL checks for napibuildskb. The napibuildskb function can return NULL when allocation fails. In octep VFoqprocessrx, the result is used directly without a NULL check in both the single-buffer and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Revert “mm/hugetlbfs: update hugetlbfs to use mmapprepare”. This revertment corresponds to the commit ea52cb24cd3f “mm/hugetlbfs: update hugetlbfs to use mmapprepare”, with conflict resolution to account for changes in commit...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fixed a use-after-free in scpsysgetbusprotectionlegacy. In scpsysgetbusprotectionlegacy, the offindnodewithproperty function returns a device node, and its reference count is incremented. This function then...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Limit NVMe request size to 2 MiB The HBA firmware reports NVMe MDTS values based on the underlying drive’s capabilities. However, since the driver allocates a fixed 4K buffer for the PRP list, which can accommodate...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: Do not attempt to transmit during emulated read-only dual/quad operations. The core will handle reads by generating clock cycles itself; there is no need to generate clock cycles by transmitting garbage...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fixed access to stale wptr mapping. Use drmexec to take both locks—i.e., vmrootbo and wptrobjbo—to properly access the mapping data. This fixes the security issue where wptrobj is unmapped while a queue creation...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/xe/uapi: Added validation in xevmmadviseioctl to reject PAT indices with the XECOHNONE coherency mode when applied to CPU cached memory. Using cohnone with CPU cached buffers is a security issue. When the kernel clears pag...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: pseries/papr-hvpipe: Fixed race conditions with interrupt handlers. When executing the -ioctl handler or the -release handler, if an interrupt occurs on the same CPU, a deadlock can occur. This patch fixes both handlers to use...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Net: libwx: using requestirq for VF miscellaneous interrupts. Currently, requestthreadedirq is used with a primary handler but a NULL threaded handler, while also setting the IRQFONESHOT flag. This specific combination triggers a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix UAF in inactivity-timer cleanup path Commit 38224c472a03 "HID: appletb-kbd: fix slab use-after-free bug in appletbkbdprobe" added timerdeletesync&kbd-inactivitytimer to both the probe closehw error path and...

Astra Linux – Vulnerability in iproute2

In iproute2 before version 5.1.0, there is a use-after-free issue in the getnetnsidfromname function in the ip/ipnetns.c file. NOTE: The relevance of this issue to security may be limited to certain uses of setuid, which, although not a default option, are sometimes an optional configuration...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: iavf: Fixed error handling for reset operations. Do not call iavfclose during error handling for iavfresettask. Doing so may lead to a double call to napidisable, which can cause a deadlock. Removing the VF may cause...

Astra Linux – Vulnerability in Linux

A issue was discovered in netfilter within the Linux kernel before version 5.10. There may be a use-after-free situation in the packet processing context, as the per-CPU sequence count is mishandled during concurrent iptables rule replacements. This vulnerability could be exploited with the...

Astra Linux – Vulnerability in mbedtls

The use of a broken or risky cryptographic algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS for all versions prior to 3.0.0, 2.27.0, or 2.16.11 allows attackers with access to precise timing and memory access information typically from an untrusted operating system attacking a...

Astra Linux – Vulnerability in Linux 5.15, Linux

Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access...