GSD-2022-1007934 udf: Fix a slab-out-of-bounds write bug in udf_find_entry()

udf: Fix a slab-out-of-bounds write bug in udffindentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

PT-2022-36416 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: A slab-out-of-bounds write bug was found in the udf find entry function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2022-36322 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: A slab-out-of-bounds write bug was found in the udf find entry function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-36554 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: A slab-out-of-bounds write bug was found in the udf find entry function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-36189 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.79 Description: A slab-out-of-bounds write bug was found in the udf find entry function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

kernel: net/packet: slab-out-of-bounds access in packet_recvmsg()

An out-of-bounds access issue was found in the Linux kernel networking subsystem in the way raw packet sockets AFPACKET used PACKETCOPYTHRESH and mmap operations. A local attacker with CAPNETRAW capability could use this flaw to trigger a buffer overflow resulting in a system crash or privilege...

kernel: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts

A vulnerability was found in the thrustmasterinterrupts function in the Linux kernel's HID Thrustmaster driver. This issue arises from a lack of validation for the actual number of endpoints, leading to a slab-out-of-bounds read when the code accesses the endpoint array...

kernel: net/packet: slab-out-of-bounds access in packet_recvmsg()

An out-of-bounds access issue was found in the Linux kernel networking subsystem in the way raw packet sockets AFPACKET used PACKETCOPYTHRESH and mmap operations. A local attacker with CAPNETRAW capability could use this flaw to trigger a buffer overflow resulting in a system crash or privilege...

kernel: net/packet: slab-out-of-bounds access in packet_recvmsg()

An out-of-bounds access issue was found in the Linux kernel networking subsystem in the way raw packet sockets AFPACKET used PACKETCOPYTHRESH and mmap operations. A local attacker with CAPNETRAW capability could use this flaw to trigger a buffer overflow resulting in a system crash or privilege...

PT-2022-34790 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue is related to the slub component in the Linux Kernel, specifically with the flush cpu slab and free slab functions being invoked in a task context. The actual impact and attack...

PT-2024-11862 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0-rc7 Description: A slab-out-of-bounds access was reported in the fib nh match function. The issue occurs when attempting to delete a multipath route while the fib info contains an nh reference. Separate...

PT-2022-7434 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the kmalloc function in the Linux kernel, which can fail due to out-of-memory conditions. If it fails, the function should return an error code errno instead of...

GSD-2022-1004939 mm/slub: add missing TID updates on slab deactivation

mm/slub: add missing TID updates on slab deactivation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.323 by commit...

GSD-2022-1004890 mm/slub: add missing TID updates on slab deactivation

mm/slub: add missing TID updates on slab deactivation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.288 by commit...

GSD-2022-1004478 mm/slub: add missing TID updates on slab deactivation

mm/slub: add missing TID updates on slab deactivation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.54 by commit...

GSD-2022-1003754 HID: bigben: fix slab-out-of-bounds Write in bigben_probe

HID: bigben: fix slab-out-of-bounds Write in bigbenprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003605 HID: bigben: fix slab-out-of-bounds Write in bigben_probe

HID: bigben: fix slab-out-of-bounds Write in bigbenprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

new packages: google-roboto-slab-fonts

An update is available for google-roboto-slab-fonts. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

GSD-2022-1002187 net/tls: fix slab-out-of-bounds bug in decrypt_internal

net/tls: fix slab-out-of-bounds bug in decryptinternal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1001693 net/tls: fix slab-out-of-bounds bug in decrypt_internal

net/tls: fix slab-out-of-bounds bug in decryptinternal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...