GSD-2022-1003549 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 b...

GSD-2022-1003423 drm/v3d: Fix null pointer dereference of pointer perfmon

drm/v3d: Fix null pointer dereference of pointer perfmon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003300 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by...

GSD-2022-1003000 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by...

GSD-2022-1002664 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by...

papi bug fix and enhancement update

An update is available for libpfm, papi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PAPI Performance Application Programming Interface is a software library...

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

CMC Electronics EFB breakout vulnerability

We’ve been finding vulnerabilities in electronic flight bags for a few years now. Disclosure response from the vendors involved has varied from excellent to radio silence. In every case we have tried extremely hard to engage with the vendors involved, even where we were ignored. We asked friendly...

PT-2022-32137

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

PT-2022-32244

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

PT-2022-30927

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

PT-2022-31263

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

PT-2022-31997

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

PT-2022-32317

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue concerns the irqchip/armada-370-xp component in the Linux Kernel. It involves not properly handling Performance Counter Overflow on certain chip models, including A375, A38x, and...

PT-2022-31812

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

PT-2022-31563

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.1 through v5.15.45 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet bee...

SUSE: Security Advisory (SUSE-SU-2022:2189-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-PV38-MQPP-V72H Cross-site Scripting in Jenkins NS-ND Integration Performance Publisher Plugin

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of th...