An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

...

GSD-2022-1004893 ext4: make variable "count" signed

ext4: make variable "count" signed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.285 by commit d1d3f02c0ce66656ca7660a69e39431e5e5dafb6,...

GSD-2022-1004834 ext4: make variable "count" signed

ext4: make variable "count" signed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.249 by commit c86fce1d8c083d268103d2d19e5a9a66000a8e6f,...

GSD-2022-1004640 ext4: make variable "count" signed

ext4: make variable "count" signed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit 0ca74dacfd478a9c03361b7512be48ea6b22e8a5,...

GSD-2022-1004487 ext4: make variable "count" signed

ext4: make variable "count" signed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit 4fadac8c73764436a3434acf324b4d213d5bd281, ...

GSD-2022-1004289 ext4: make variable "count" signed

ext4: make variable "count" signed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit 084648a89d7c8b86563a4f64255fcfc82e31020a, i...

PT-2022-32638

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue concerns a fix for PM usage count for console handover. It was introduced in version v5.7 and fixed in Linux Kernel version v5.15.56. The actual impact and attack plausibility have...

PT-2022-32818

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue concerns a potential security vulnerability in the Linux Kernel. It is related to the serial: 8250 and involves fixing the PM usage count for console handover. The actual impact an...

PT-2022-32417

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue concerns a fix for PM usage count for console handover. It was introduced in version v5.7 and fixed in Linux Kernel version v5.18.13. The actual impact and attack plausibility have...

PT-2022-6552

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an...

(Pwn2Own) Unified Automation OPC UA C++ Improper Update of Reference Count Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OpcUaSecureListenerProcessSessionCallRequest...

PT-2024-8464 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc7 Description: The issue is related to an infinite loop in the dax iomap rw function when the read system call is invoked with a count of 0. This can cause a WARNING report and an infinite loop. The iom...

PT-2022-37872

Уязвимость функции xfrm policy check модуля net/xfrm/xfrm policy.c реализации сетевых функций ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-37891

Уязвимость функций mt6359 accdet parse dt и mt6359 parse dt ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

DEBIAN-CVE-2022-32082

MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...

CVE-2022-32082

MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...

MariaDB security vulnerabilities

MariaDB is a free and open source database management system from the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine.MariaDB has a security vulnerability that stems from an assertion error found at table-getrefcount == 0 in dict0dict.cc. No details of the...

CVE-2022-32082

Removed by vendor...

PT-2025-8546

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18 Description The issue arises in the Linux kernel when the console is enabled, and the univ8250 console setup function calls serial8250 console setup before the .dev is set to uart port. This results in pm...

GSD-2022-1003299 blk-iolatency: Fix inflight count imbalances and IO hangs on offline

blk-iolatency: Fix inflight count imbalances and IO hangs on offline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...