An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.

...

Amazon Linux 2 : kernel, --advisory ALAS2-2022-1838 (ALAS-2022-1838)

The version of kernel installed on the remote host is prior to 4.14.291-218.527. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1838 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the...

CVE-2022-40476

A null pointer dereference issue was discovered in fs/iouring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service...

AZL-10969 CVE-2022-40476 affecting package kernel for versions less than 5.15.67.1-4

A null pointer dereference issue was discovered in fs/iouring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service...

CVE-2022-40476

A null pointer dereference issue was discovered in fs/iouring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service...

Null pointer dereference

A null pointer dereference issue was discovered in fs/iouring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service...

CVE-2022-40476

A null pointer dereference issue was discovered in fs/iouring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service...

CVE-2022-36768

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014...

Design/Logic Flaw

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014...

CVE-2022-34356

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM X-Force ID: 230502...

CVE-2022-3170

An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id-name' provided by the user did not end with '\0'. A privileged local user could pass a specially crafted name through ioctl interface and crash the system or potentially escalate their...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

PT-2022-5072 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS versions prior to 8.2.3c Brocade Fabric OS versions prior to 8.2.0cbn5 Description: A privilege escalation issue in Brocade Fabric OS CLI...

CVE-2022-31226

Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by sending excess data to a function in order to gain arbitrary code execution on the system...

CVE-2022-31220

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures...

Design/Logic Flaw

Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by consuming excess memory in order to cause the application to crash...

CVE-2022-31225

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures...

AIX is vulnerable to a privilege escalation vulnerability,AIX kernel is vulnerable to a privilege escalation vulnerability

IBM SECURITY ADVISORY First Issued: Mon Sep 12 13:12:47 CDT 2022 |Updated: Mon Oct 10 14:29:18 CDT 2022 |Update: Corrected the affected upper fileset levels for VIOS 3.1.2.30 and | 3.1.2.40. Added iFixes with the correct prereqs for VIOS 3.1.2.30 and | 3.1.2.40. The most recent version of this...

CVE-2022-36768

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014...