PT-2025-5381 · Astra Linux+6 · Astra Linux+6

Published 2024-01-28 · Updated 2026-02-24 · CVE-2025-24528

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned.

Description The issue is related to preventing overflow when calculating ulog block size. No further details are provided about the nature of the issue, affected devices, or real-world incidents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Integer Overflow

Weakness Enumeration

CWE-787

CWE-190

Related Identifiers

ALSA-2025:2722

ALSA-2025:7067

AZL-74852

AZL-74862

BDU:2025-12302

CESA-2025_2722

CVE-2025-24528

DLA-4065-1

ECHO-84BE-2F2E-7407

INFSA-2025_2722

INFSA-2025_7067

MGASA-2025-0072

OESA-2025-1135

OPENSUSE-SU-2025:14736-1

OPENSUSE-SU-2025_0304-1

OPENSUSE-SU-2025_0343-1

OPENSUSE-SU-2025_0401-1

OPENSUSE-SU-2025_0822-1

RHSA-2025:1352

RHSA-2025:2722

RHSA-2025:7067

RHSA-2025_2722

RHSA-2025_7067

SUSE-SU-2025:0304-1

SUSE-SU-2025:0343-1

SUSE-SU-2025:0351-1

SUSE-SU-2025:0401-1

SUSE-SU-2025:0822-1

SUSE-SU-2025:20153-1

SUSE-SU-2025:20303-1

SUSE-SU-2025_0351-1

SUSE-SU-2025_0401-1

USN-7314-1

Affected Products

Astra Linux

Debian

Linuxmint

Red Hat

Red Os

Rocky Linux

Ubuntu

References · 66

• https://osv.dev/vulnerability/MGASA-2025-0072 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0822-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-74852 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:7067 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12302 · Security Note
• https://errata.almalinux.org/8/ALSA-2025-2722.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-7067.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:2722 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1135 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-24528 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20303-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0351-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-24528 · Vendor Advisory