USN-5804-2: Linux kernel vulnerabilities

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Tamás Koczka discovered that th...

USN-5804-2 linux-aws, linux-gcp-4.15 vulnerabilities

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Tamás Koczka discovered that th...

USN-5804-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-5.4, linux-hwe, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4, vulnerabilities

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Tamás Koczka discovered that th...

USN-5802-1: Linux kernel vulnerabilities

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Tamás Koczka discovered that th...

USN-5794-1: Linux kernel (AWS) vulnerabilities

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Tamás Koczka discovered that th...

[SECURITY] [DLA 3244-1] linux-5.10 security update

Debian LTS Advisory DLA-3244-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings December 20, 2022 https://wiki.debian.org/LTS Package : linux-5.10 Version : 5.10.158-2deb10u1 CVE ID : CVE-2021-3759 CVE-2022-3169 CVE-2022-3435 CVE-2022-3521 CVE-2022-3524 CVE-2022-3564...

USN-5783-1 linux-oem-5.17 vulnerability

Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

OESA-2022-2134 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the Linux kernel through 6.0.10. l2capconfigreq in net/bluetooth/l2capcore.c has an integer wraparound via L2CAPCONFREQ packets.CVE-2022-45934 There are null-ptr-deref vulnerabilities in drivers/net/sli...

PT-2022-36224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.78 Description: The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-36358 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.135 through 5.10.153 Description: A use-after-free issue exists in the l2cap conn del function of the Bluetooth L2CAP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2022-36563 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.299 Description: The issue is related to the Bluetooth L2CAP protocol in the Linux Kernel. It involves attempting to access uninitialized memory, which may have potential security implications. However, th...

PT-2022-36070 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-36499 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36512 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: A use-after-free issue exists in the l2cap conn del function of the Bluetooth L2CAP protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-36428

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.224 Description The issue concerns attempting to access uninitialized memory in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-36341

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.154 Description The issue concerns accepting connection requests for invalid SPSM in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-36071

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.8 Description The issue concerns accepting connection requests for invalid SPSM in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-36225

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.78 Description The issue concerns a problem with accepting connection requests for invalid SPSM in Bluetooth L2CAP. The actual impact and attack plausibility have not yet been proven. Recommendations For...

CLSA-2022-1670261781 Fix of 13 CVEs

CVE-2022-42703 - mm/rmap.c: don't reuse anonvma if we just want a copy - mm: rmap: explicitly reset vma-anonvma in unlinkanonvmas - mm, rmap: handle anonvmaprepare common case inline - mm/rmap: Fix anonvma-degree ambiguity leading to double-reuse CVE-2022-3565 - mISDN: fix use-after-free bugs in...

DEBIAN-CVE-2022-42895

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2capcore.c's l2capparseconfreq function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e...