GSD-2022-1001119 ubifs: Fix deadlock in concurrent rename whiteout and inode writeback

ubifs: Fix deadlock in concurrent rename whiteout and inode writeback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-30603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30305

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30043

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a double free error in the rename whiteout function, specifically affecting the whiteout ui-data component. This problem was introduced in version v4.9 and is fixed in...

PT-2022-29717

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a double free in the rename whiteout function for whiteout ui-data. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v5.16.19. The actu...

PT-2022-30304

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a double free in the rename whiteout function for whiteout ui-data. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-29393

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A double free issue was discovered in the rename whiteout function of the ubifs component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30483

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to a double free in the rename whiteout function for whiteout ui-data. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-30602

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a double free in the rename whiteout function for whiteout ui-data. The actual impact and attack plausibility have not yet been proven. Recommendations For versions...

PT-2022-30689

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description A double free issue was discovered in the rename whiteout function of the ubifs component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-29715

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29392

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.9 through v5.17.1 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30036

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30482

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

kernel security, bug fix, and enhancement update

3.10.0-1160.62.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...

March 28, 2022—KB5011563 (OS Build 22000.593) Preview

None None...

CVE-2022-26254

WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names...

Envato WoWonder 安全漏洞

Envato WoWonder is an application from the Australian company Envato. It provides a PHP social networking script. A security vulnerability exists in WoWonder The Ultimate PHP Social Network Platform v4.0.0 that could allow an unauthenticated attacker to arbitrarily change group ID names...

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system.

...

CVE-2022-0377

Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the...