DLA-3190-2 grub2 - security update

Bulletin has no description...

PT-2022-18466 · Secomea · Secomea Gatemanager

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions 9.4 through 9.7 Description: A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. Recommendations: For Secomea...

GSD-2022-1007883 net: use struct_group to copy ip/ipv6 header addresses

net: use structgroup to copy ip/ipv6 header addresses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

PT-2022-36541 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: The issue is related to a possible memory leak in the iio sysfs trig init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36312 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: A potential memory leak issue was identified in the siox device add function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-36134 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: A potential security issue exists due to inconsistent minimal MTU enforcement in macvlan. The actual impact and attack plausibility have not yet been proven. It was introduced in version...

PT-2022-36015 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to the calculation of CQEs from the user visible value in io uring. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36361 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: The issue is related to a potential security vulnerability in the btrfs filesystem, specifically in the find parent nodes function during backref walking, which may cause an inode list lea...

PT-2022-36057 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to a wrong reg type conversion in the release reference function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36604 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.333 Description: The issue concerns an attempt to access uninitialized memory in the Bluetooth L2CAP component. The actual impact and potential for attack have not been proven yet. Recommendations: For Linu...

PT-2022-36316 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue is related to an alignment problem in the bpf prog test run skb function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36154 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue is related to a null pointer dereference in the ftrace add mod function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to...

DLA-3233-1 leptonlib - security update

Bulletin has no description...

PT-2022-36124 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: A use-after-free issue was found in the ntfs attr find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-36302 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: A potential memory leak issue exists in the mISDN dsp element register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36126 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.80 Description: The issue is related to the 9p/trans fd functionality, where it does not always use O NONBLOCK for read/write operations. The actual impact and potential for attack have not been proven yet...

PT-2022-25096 · Rcs · Rcs

Name of the Vulnerable Software and Affected Versions: RCS versions prior to SMR Dec-2022 Release 1 Description: The issue is related to improper access control in RCS calls, allowing local attackers to access the incoming call number. Recommendations: For versions prior to SMR Dec-2022 Release 1...

PT-2022-36345 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: A possible memory leak was identified in the mousevsc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-36498 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: A potential security issue has been identified in the ext4 file system, related to the ext4 da release space function. The actual impact and attack plausibility have not yet been proven...

PT-2022-25100 · Samsung · Samsung Decoding Library

Name of the Vulnerable Software and Affected Versions: Samsung decoding library versions prior to SMR Dec-2022 Release 1 Description: The issue is related to an integer overflow in the Samsung decoding library, specifically affecting the handling of video thumbnails. This allows a local attacker ...