Security Bulletin: IBM Tivoli Netcool/OMNIbus Probe and Integrations Library are affected by vulnerabilities in FasterXML jackson-databind (CVE-2022-42004, CVE-2022-42003)

Summary FasterXML jackson-databind is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library and Probe for Microsoft Exchange Web Services. The latest patches include FasterXML jackson-databind 2.13.4.2 that fixes the vulnerabilities. CVE-2022-42004, CVE-2022-42003...

Mozilla: Keystroke Side-Channel Leakage

The Mozilla Foundation Security Advisory describes this flaw as: Keyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread addresses. Cache-based timing attacks such as Prime+Probe could have possibly figured out which keys were being pressed...

PT-2025-49691

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the ipw2200 driver within the Linux kernel. Specifically, the issue occurs in the ipw wdev init function, where memory allocated within the function is not releas...

PT-2022-36344 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: A potential issue exists in the vdec probe function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2022-36345 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: A possible memory leak was identified in the mousevsc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-36506 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: A possible memory leak was identified in the mousevsc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v4.19.267,...

PT-2022-36074 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.8 Description: A potential issue exists in the vdec probe function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36565 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: A possible memory leak was identified in the mousevsc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v4.14.300,...

PT-2022-36216 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.79 Description: A possible memory leak was identified in the mousevsc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v5.15.79,...

PT-2022-36430

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.224 Description A potential issue exists in the vdec probe function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-36227

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.78 Description A potential issue exists in the vdec probe function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-36613

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.334 Description A possible memory leak was identified in the mousevsc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v4.9.334, updat...

UBUNTU-CVE-2022-23491

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

PT-2025-38340

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak was identified in the mt8183 mt6358 ts3a227 max98357 dev probe function within the ASoC ALSA on System-on-Chip subsystem for MediaTek mt8183 platforms. The issue...

PT-2022-38220

Уязвимость функции mcb probe модуля drivers/mcb/mcb-core.c драйвера шины MEN Chameleon Bus ядра операционной системы Linux связана с неправильным освобождением памяти «утечка памяти». Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-37626

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the pxa2xx-flash probe function within the mtd maps module of the Linux kernel. The issue occurs when a remapping error happens, failing to free the 'info...

PT-2025-41042

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the rpi firmware probe function when mbox request channel fails. Specifically, the firmware is not freed through rpi firmware delete, leading to a memory leak. Th...

PT-2022-38162

Уязвимость функции rpi firmware probe модуля drivers/firmware/raspberrypi.c драйвера прошивок ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2024-11881

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3+ Description A null pointer dereference issue has been identified in the Linux kernel. The issue occurs when the probe function fails in phy attach direct, causing a null pointer dereference in device...

Mozilla: Keystroke Side-Channel Leakage

The Mozilla Foundation Security Advisory describes this flaw as: Keyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread addresses. Cache-based timing attacks such as Prime+Probe could have possibly figured out which keys were being pressed...