Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5691-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5691-1 advisory. David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-5692-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5692-1 advisory. David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a...

CVE-2022-2602

iouring UAF, Unix SCM garbage collection...

CVE-2022-38983

The BT Hfp Client module has a Use-After-Free UAF vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution...

CVE-2022-38983

The CVE-2022-38983 entry concerns a Use-After-Free (UAF) vulnerability in the Huawei HarmonyOS BT Hfp Client module. Multiple connected sources (Red Hat CVE, NVD/NVD record, CNVD/CNNVD, PRION) confirm this vulnerability in the BT Hfp Client, with potential for arbitrary code execution if exploite...

GSD-2022-1006552 bnxt: prevent skb UAF after handing over to PTP worker

bnxt: prevent skb UAF after handing over to PTP worker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...

GSD-2022-1006468 bnxt: prevent skb UAF after handing over to PTP worker

bnxt: prevent skb UAF after handing over to PTP worker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

GSD-2022-1006417 nvme-tcp: fix UAF when detecting digest errors

nvme-tcp: fix UAF when detecting digest errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.213 by commit...

GSD-2022-1006399 nvme-tcp: fix UAF when detecting digest errors

nvme-tcp: fix UAF when detecting digest errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.143 by commit...

GSD-2022-1006371 nvme-tcp: fix UAF when detecting digest errors

nvme-tcp: fix UAF when detecting digest errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...

GSD-2022-1006323 ALSA: bcd2000: Fix a UAF bug on the error path of probing

ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006281 ALSA: bcd2000: Fix a UAF bug on the error path of probing

ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006189 ALSA: bcd2000: Fix a UAF bug on the error path of probing

ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006071 ALSA: bcd2000: Fix a UAF bug on the error path of probing

ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005923 ALSA: bcd2000: Fix a UAF bug on the error path of probing

ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005707 binder: fix UAF of ref->proc caused by race condition

binder: fix UAF of ref-proc caused by race condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005704 wifi: mac80211: Fix UAF in ieee80211_scan_rx()

wifi: mac80211: Fix UAF in ieee80211scanrx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005699 ALSA: bcd2000: Fix a UAF bug on the error path of probing

ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005645 spi: tegra20-slink: fix UAF in tegra_slink_remove()

spi: tegra20-slink: fix UAF in tegraslinkremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-33903 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to a use-after-free UAF bug in the tegra slink remove function. This bug was introduced in Linux Kernel version v5.15 and is fixed in version v5.15.61. The actual impac...