2127 matches found
GSD-2022-1006071 ALSA: bcd2000: Fix a UAF bug on the error path of probing
ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...
GSD-2022-1005923 ALSA: bcd2000: Fix a UAF bug on the error path of probing
ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005707 binder: fix UAF of ref->proc caused by race condition
binder: fix UAF of ref-proc caused by race condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...
GSD-2022-1005704 wifi: mac80211: Fix UAF in ieee80211_scan_rx()
wifi: mac80211: Fix UAF in ieee80211scanrx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...
GSD-2022-1005699 ALSA: bcd2000: Fix a UAF bug on the error path of probing
ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...
GSD-2022-1005645 spi: tegra20-slink: fix UAF in tegra_slink_remove()
spi: tegra20-slink: fix UAF in tegraslinkremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...
PT-2022-33903 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to a use-after-free UAF bug in the tegra slink remove function. This bug was introduced in Linux Kernel version v5.15 and is fixed in version v5.15.61. The actual impac...
GSD-2022-1005392 binder: fix UAF of ref->proc caused by race condition
binder: fix UAF of ref-proc caused by race condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...
GSD-2022-1005388 wifi: mac80211: Fix UAF in ieee80211_scan_rx()
wifi: mac80211: Fix UAF in ieee80211scanrx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...
GSD-2022-1005382 ALSA: bcd2000: Fix a UAF bug on the error path of probing
ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...
GSD-2022-1004961 binder: fix UAF of ref->proc caused by race condition
binder: fix UAF of ref-proc caused by race condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...
GSD-2022-1004956 wifi: mac80211: Fix UAF in ieee80211_scan_rx()
wifi: mac80211: Fix UAF in ieee80211scanrx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...
CVE-2022-38457
A use-after-freeUAF vulnerability was found in function 'vmwcmdrescheck' in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of...
CVE-2022-38457
A use-after-freeUAF vulnerability was found in function 'vmwcmdrescheck' in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of...
CVE-2022-40133
CVE-2022-40133 : A use-after-free in the Linux kernel vmwgfx driver (function vmw_execbuf_tie_context in drivers/gpu/vmxgfx/vmxgfx_execbuf.c) can be triggered by local unprivileged/user-space activity via the render node (/dev/dri/renderD128). Exploitation may allow a local attacker to gain eleva...
CVE-2022-38457
CVE-2022-38457 affects the vmwgfx driver (Linux kernel) in the function vmw_cmd_res_check within drivers/gpu/vmxgfx/vmxgfx_execbuf.c, exposed via /dev/dri/renderD128. The issue is a use-after-free, leading to local privilege escalation and DoS. Connected advisories ( MiracleLinux AXSA) reference ...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2022-2586-LPE LPE N-day Exploit for...
Exploit for Use After Free in Linux Linux_Kernel
2022-LPE-UAF Untested POC code Security researchers discove...
Exploit for Use After Free in Linux Linux_Kernel
2022-LPE-UAF Security researchers discovered 3 vulnerabiliti...
FreeBSD -- AIO credential reference count leak
Problem Description: The aioaqueue function, used by the liolistio system call, fails to release a reference to a credential in an error case. Impact: An attacker may cause the reference count to overflow, leading to a use after free UAF...