2127 matches found
[Important] [Security] Virtuozzo ReadyKernel patch 143.0 for Virtuozzo Hybrid Server 7.0, 7.5
The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.x. Vulnerability id: CVE-2022-1966 3.10.0-1127.8.2.vz7.158.8 to 3.10.0-1160.53.1.vz7.185.3 The bug allows to initialize a non-stateful lookup...
GSD-2022-1004084 NFC: NULL out the dev->rfkill to prevent UAF
NFC: NULL out the dev-rfkill to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...
GSD-2022-1004020 NFC: NULL out the dev->rfkill to prevent UAF
NFC: NULL out the dev-rfkill to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003537 driver: base: fix UAF when driver_attach failed
driver: base: fix UAF when driverattach failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...
GSD-2022-1003284 driver: base: fix UAF when driver_attach failed
driver: base: fix UAF when driverattach failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...
GSD-2022-1003147 NFC: NULL out the dev->rfkill to prevent UAF
NFC: NULL out the dev-rfkill to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...
GSD-2022-1002992 macsec: fix UAF bug for real_dev
macsec: fix UAF bug for realdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit 78933cbc143b82d02330e00900d2fd08f2682f4e, it...
GSD-2022-1002982 driver: base: fix UAF when driver_attach failed
driver: base: fix UAF when driverattach failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...
GSD-2022-1002795 NFC: NULL out the dev->rfkill to prevent UAF
NFC: NULL out the dev-rfkill to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...
GSD-2022-1002648 macsec: fix UAF bug for real_dev
macsec: fix UAF bug for realdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit d130282179aa6051449ac8f8df1115769998a665, it w...
GSD-2022-1002640 driver: base: fix UAF when driver_attach failed
driver: base: fix UAF when driverattach failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...
Unbreakable Enterprise kernel-container security update
4.14.35-2047.514.3.el7 - uek-rpm: Update OL7 SecureBoot certificate files Saeed Mirzamohammadi Orabug: 34219958 4.14.35-2047.514.2 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34207044 CVE-2022-1729 - debug: Lock down kgdb Stephen Brennan Orabug: 34207043 CVE-2022-21499...
CVE-2022-1898
CVE-2022-1898 refers to a Use After Free in Vim when handling vim/vim code paths, with the description stating the issue occurs in Vim prior to version 8.2. Connected documents corroborate the vulnerability in Vim and list advisories where Vim was fixed (e.g., Astra Linux bulletin and Cloud Found...
CVE-2022-1795
CVE-2022-1795 affects GPAC (gpac/gpac) prior to version 2.1.0-DEV. Multiple connected advisories describe a memory misreference/Use After Free vulnerability in GPAC, potentially causing a crash and, in some disclosures, arbitrary code execution. Sources consistently identify the issue as originat...
CVE-2022-22252
The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability...
Spoofing
The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability...
CVE-2022-22260
The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability...
Spoofing
The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability...
CVE-2022-22252
CVE-2022-22252 involves Huawei HarmonyOS DFX module and is described as a use-after-free (UAF) vulnerability that can affect system stability. The NVD entry lists a CVSS v3.1 base score of 7.5 (Network vector, low attack complexity, no user interaction, high impact on availability) and notes an i...
