GSD-2022-1000991 net: dsa: realtek: rtl8365mb: serialize indirect PHY register access

net: dsa: realtek: rtl8365mb: serialize indirect PHY register access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

PT-2022-29443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.13 through v5.17.1 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30075

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and fix...

PT-2022-30615

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...

PT-2022-29761

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and fix...

PT-2022-30698

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...

PT-2022-30499

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and fix...

PT-2022-30333

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a use after free in the register test dev kmod function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.13 and...

PT-2022-29408

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.17.1 Description The issue is related to an off-by-one error in the register cache size. It was introduced in version v5.12 and fixed in version v5.17.2. The actual impact and attack plausibility have not...

PT-2022-30050

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.15.32 Description The issue is related to an off-by-one error in the register cache size. It was introduced in version v5.12 and fixed in version v5.15.33. The actual impact and attack plausibility have n...

PT-2022-29234

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description The issue is related to a use-after-free UAF error in the ep93xx clk register gate function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-29264

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description The issue concerns the serialization of indirect PHY register access in the Realtek rtl8365mb driver. It was introduced in version v5.16 and fixed in version v5.17.4. The actual impact and...

PT-2022-29462

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the use of stronger register read/writes to assure ordering in the net: bcmgenet component. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-29450

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to preventing array overflow in the visconti clk register gates function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29495

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.17.1 Description The issue is related to an out-of-bounds read when handling the Post Cursor2 register. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30731

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.274 Description The issue is related to the initialization of registers in the nft do chain function within the netfilter nf tables component. The actual impact and potential for attack have not been proven...

PT-2022-29781

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue concerns the use of stronger register read/writes to assure ordering in the net: bcmgenet component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30347

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns the use of stronger register read/writes to assure ordering in the net: bcmgenet component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30655

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.237 Description The issue is related to the initialization of registers in the nft do chain function within the netfilter nf tables component. The actual impact and potential for attack have not been proven...

PT-2022-30790

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.309 Description The issue is related to the initialization of registers in the nft do chain function within the netfilter nf tables component. The actual impact and potential for attack have not been proven...