GSD-2022-1007460 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed

net: fix UAF issue in nfqnlnfhookdrop when opsinit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.264 by commit...

GSD-2022-1007343 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed

net: fix UAF issue in nfqnlnfhookdrop when opsinit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.223 by commit...

GSD-2022-1007337 fs: fix UAF/GPF bug in nilfs_mdt_destroy

fs: fix UAF/GPF bug in nilfsmdtdestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.148 by commit...

GSD-2022-1007172 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed

net: fix UAF issue in nfqnlnfhookdrop when opsinit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.153 by commit...

GSD-2022-1007163 fs: fix UAF/GPF bug in nilfs_mdt_destroy

fs: fix UAF/GPF bug in nilfsmdtdestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.73 by commit...

GSD-2022-1006999 mm: hugetlb: fix UAF in hugetlb_handle_userfault

mm: hugetlb: fix UAF in hugetlbhandleuserfault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006946 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed

net: fix UAF issue in nfqnlnfhookdrop when opsinit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006934 fs: fix UAF/GPF bug in nilfs_mdt_destroy

fs: fix UAF/GPF bug in nilfsmdtdestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.1 by commit 2a96b532098284ecf8e4849b8b9e5fc7a28bdee9...

GSD-2022-1006713 mm: hugetlb: fix UAF in hugetlb_handle_userfault

mm: hugetlb: fix UAF in hugetlbhandleuserfault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006689 ip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed

ip6mr: fix UAF issue in ip6mrskdone when addrconfinitnet failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

GSD-2022-1006629 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed

net: fix UAF issue in nfqnlnfhookdrop when opsinit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

Google addressed several flaws with Chrome 107

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Google Chrome addresses multiple vulnerabilities in its latest stable channel update for Windows, Mac, and Linux.The Use-After-Free UAF issue is responsible for four of the six Chrome...

CVE-2022-44550

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44547

The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability...

Design/Logic Flaw

The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability...

Code injection

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44547

The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability...

CVE-2022-44550

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44547

CVE-2022-44547 affects the Display Service module (HarmonyOS). The issue is a use-after-free (UAF) in the Display Service, causing potential availability impact. Multiple sources (NVD, Red Hat, PT Security, CVE list, and related enrichments) confirm the vulnerability and its impact on availabilit...

CVE-2022-44550

CVE-2022-44550 affects Huawei/HarmonyOS: a use-after-free in the graphics display module when traversing graphic layers. The underlying issue is a memory reuse-after-release condition that can lead to availability impact. Public details in the provided documents identify the vulnerability and its...