kernel: dm: fix mempool NULL pointer race when completing IO

A flaw was found in the Linux kernel's Device Mapper DM subsystem. This flaw allows a local user to cause a denial of service DoS by triggering a system crash. The issue occurs due to a race condition when an input/output I/O request completes concurrently with a table swap operation, resulting i...

kernel: use-after-free in the TEE subsystem

A use-after-free flaw in the Linux kernel TEE Trusted Execution Environment subsystem was found in the way user calls ioctl TEEIOCOPENSESSION or TEEIOCINVOKE. A local user could use this flaw to crash the system or escalate their privileges on the system. If the Linux system non configured with t...

maven:3.6 security and enhancement update

An update is available for apache-commons-io, atinject, jsr-305, maven-shared-utils, plexus-cipher, aopalliance, plexus-classworlds, guava, apache-commons-cli, plexus-containers, plexus-sec-dispatcher, httpcomponents-client, maven-resolver, apache-commons-lang3, plexus-interpolation, sisu,...

PT-2025-8360

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue in the Linux kernel has been identified, specifically in the io/mm/arm-smmu-v3-sva component. The problem arises from calling arm64 mm context put without holding ...

CVE-2022-29968

An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...

GSD-2022-1002123 ext4: fix fs corruption when tring to remove a non-empty directory with IO error

ext4: fix fs corruption when tring to remove a non-empty directory with IO error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by...

GSD-2022-1001905 ext4: fix fs corruption when tring to remove a non-empty directory with IO error

ext4: fix fs corruption when tring to remove a non-empty directory with IO error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by...

GSD-2022-1001666 btrfs: release correct delalloc amount in direct IO write path

btrfs: release correct delalloc amount in direct IO write path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.35 by commit...

GSD-2022-1001598 ext4: fix fs corruption when tring to remove a non-empty directory with IO error

ext4: fix fs corruption when tring to remove a non-empty directory with IO error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by...

GSD-2022-1001289 ext4: fix fs corruption when tring to remove a non-empty directory with IO error

ext4: fix fs corruption when tring to remove a non-empty directory with IO error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by comm...

GSD-2022-1000990 btrfs: release correct delalloc amount in direct IO write path

btrfs: release correct delalloc amount in direct IO write path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

PT-2022-29375

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.1 Description The issue is related to io uring, where poll refs are bumped to full 31-bits. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29263

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.3 Description The issue is related to the btrfs filesystem in the Linux Kernel, specifically with the direct IO write path. It involves the release of the correct delalloc amount. The actual impact and...

PT-2022-29871

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a potential fs corruption when trying to remove a non-empty directory with an IO error. The actual impact and attack plausibility have not yet been proven...

PT-2022-29267

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the io uring feature in the Linux Kernel. It involves dropping the old style inflight file tracking. The actual impact and attack plausibility have not yet been proven...

PT-2022-29248

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17.3 through v5.17.4 Description The issue concerns the io uring functionality, specifically the abort file assignment prior to assigning credentials. The actual impact and attack plausibility have not yet been proven...

PT-2022-29562

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential issue exists where file system corruption can occur when attempting to remove a non-empty directory with an IO error. The actual impact and attack plausibility have not yet been...

PT-2022-30178

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists where file system corruption can occur when attempting to remove a non-empty directory with an IO error. The actual impact and attack plausibility have not yet been...

PT-2022-29939

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.27 through v5.15.34 Description The issue concerns the btrfs filesystem in the Linux Kernel, specifically with the release of the correct delalloc amount in the direct IO write path. The actual impact and attack...

AZL-9582 CVE-2022-29582 affecting package kernel for versions less than 5.15.37.1-2

In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...