CVE-2022-21754

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06535953; Issue ID: ALPS06535953...

kernel: use-after-free in hso_free_net_device() in drivers/net/usb/hso.c

A flaw use-after-free in the Linux kernel USB High Speed Mobile Devices functionality was found in the way user detaches USB device. A local user could use this flaw to crash the system or escalate their privileges on the system...

GSD-2022-1001546 net: asix: add proper error handling of usb read errors

net: asix: add proper error handling of usb read errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

PT-2022-30657

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description A potential security issue exists in the Linux Kernel, specifically in the sl tx timeout function related to the NPD bug in the slip network driver. The actual impact and attack plausibility...

PT-2022-30733

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to a bug in the sl tx timeout function in the Linux Kernel's slip network driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29441

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the lack of protection for the VLAN list in the hns3 network driver. This could potentially lead to security vulnerabilities, although the actual impact and attack...

CVE-2022-1198

A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space...

An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory.

...

GSD-2022-1000378 net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup

net: usb: ax88179178a: Fix out-of-bounds accesses in RX fixup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.101 by commit...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.16.10 have a security vulnerability that stems from the lack of RNDIS USB validation of the size of the RNDIS MSG SET command. An attacker could exploit this vulnerabilit...

AlmaLinux 8 : kernel (ALSA-2020:4431)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:4431 advisory. - In the Android kernel in the video driver there is a kernel pointer leak due to a WARNON statement. This could lead to local information disclosure with...

UBUNTU-CVE-2021-3861

The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj...

Mageia: Security Advisory (MGASA-2020-0036)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-26940

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.83 Description A double free issue was discovered on the error path in the Marvell Prestera network driver. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations...

CVE-2021-43247

Windows TCP/IP Driver Elevation of Privilege Vulnerability...

PT-2021-26062

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to the hns3 network driver in the Linux Kernel, where the function hns3 nic net open can be called repeatedly, potentially leading to security vulnerabilities. The actual...

PT-2021-26188

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to the hns3 network driver in the Linux Kernel, where the function hns3 nic net open can be called repeatedly, potentially leading to security issues. The actual impact...

PT-2021-30110

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the hns3 network driver in the Linux Kernel, where the function hns3 nic net open can be called repeatedly, potentially leading to security issues. The actual impact a...

PT-2021-26115

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the hns3 network driver in the Linux Kernel, where the function hns3 nic net open can be called repeatedly, potentially leading to security vulnerabilities. The actual...

PT-2021-30057

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to the hns3 network driver in the Linux Kernel, where the function hns3 nic net open can be called repeatedly, potentially leading to security issues. The actual impact a...