USN-6071-1 linux-oem-5.17 vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the...

kernel: net: sched: fix memory leak in tcindex_set_parms

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix memory leak in tcindexsetparms Syzkaller reports a memory leak as follows: ==================================== BUG: memory leak unreferenced object 0xffff88810c287f00 size 256: comm "syz-executor105", pid 3600,...

kernel: sched/core: Do not requeue task on CPU excluded from cpus_mask

In the Linux kernel, the following vulnerability has been resolved: sched/core: Do not requeue task on CPU excluded from cpusmask The following warning was triggered on a large machine early in boot on a distribution kernel but the same problem should also affect mainline. WARNING: CPU: 439 PID: ...

kernel: driver core: fix deadlock in __device_attach

In the Linux kernel, the following vulnerability has been resolved: driver core: fix deadlock in deviceattach In deviceattach function, The lock holding logic is as follows: ... deviceattach devicelockdev // get lock dev asyncscheduledevdeviceattachasynchelper, dev; // func asyncschedulenode...

Kernel: NULL pointer dereference problem in sctp_sched_dequeue_common

A NULL pointer dereference issue was found in the SCTP network protocol in net/sctp/streamsched.c in the Linux kernel. If streamin allocation fails, streamout is freed, which would be accessed further. This flaw allows a local user to crash the system or potentially cause a denial of service...

A flaw was found in the Linux kernel's netdevsim device driver within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.

...

CVE-2022-40508

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...

CVE-2022-34144

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

Authentication flaw

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

Cross site scripting

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...

CVE-2022-40508 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...

CVE-2022-40508

CVE-2022-40508 is a reported transient denial-of-service caused by a reachable assertion in the Modem while processing cross-carrier scheduling configuration, not supported. The CVE entry shows a CVSS v3.1 base score of 7.5 (HIGH), with NETWORK attack vector, no privileges required, no user inter...

CVE-2022-40508 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...

CVE-2022-34144 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

CVE-2022-34144

CVE-2022-34144 is a Transient Denial of Service arising from a reachable assertion in the Modem during OSI decode scheduling. Documented across NVD/Red Hat/PRION/vuln enrichment entries, the issue targets a Modem component (Qualcomm-based ecosystems) and is rated High (CVSS 3.1: 7.5) with network...

CVE-2022-34144 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem during OSI decode scheduling...

PT-2023-13799 · Qualcomm · 315 5G Iot Modem Firmware +78

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient DOS Denial of Service due to a reachable assertion in the Modem while processing configuration related to cross...

PT-2023-13342 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient DOS due to a reachable assertion in the Modem during OSI decode scheduling. Recommendations: At the moment, there is no information about a newer version...

This Week in Spring - May 2, 20223

Hi, Spring fans! Welcome to another installment of This Week in Spring! You realize it's already May, 2023? Time's flying, way too quickly! I just got back from Bangalore, India, where I spoke at the amazing Great International Developer Summit, one of the all time best shows ever, and now I'm...

A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.

...