PT-2022-35939 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to the use of a dedicated spinlock for trans fd in net/9p. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-36016 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v6.0.9 Description: A memory leak issue was discovered in the check func call function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.13...

PT-2022-36115 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to a null pointer dereference in the ib core cleanup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36419 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.224 Description: A potential buffer overflow issue exists in the brcmf fweh event worker function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35961 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to an overflow check in the sgx validate offset length function. It was introduced in version v5.11 and fixed in version v6.0.10. The actual impact and attack plausibili...

PT-2022-36421 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-36000 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns error handling in the ata tdev add function. It was introduced in version v2.6.37 and fixed in version v6.0.10. The actual impact and attack plausibility have not yet been...

PT-2022-36171 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: A potential null pointer dereference issue exists in the drm vblank destroy worker function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-36065 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: A memory leak issue exists in the query regdb file function related to cfg80211, which is a part of the Linux Kernel's wifi functionality. The actual impact and potential for attack have not...

PT-2022-36099 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue concerns the netfilter: ipset component, where a limit is not properly enforced, potentially leading to huge memory allocation. The actual impact and attack plausibility have not ye...

PT-2022-36146 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue is related to a possible memory leak in the iio sysfs trig init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36295 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue is related to a potential security problem in the net/x25 component, specifically in the x25 lapb receive frame function, where a skb leak occurs. The actual impact and attack...

PT-2022-36581 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.334 Description: The issue is related to an out-of-bounds read in the ntfs attr find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-36155 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue concerns a potential null pointer dereference in the sparx stats init and sparx5 start functions. The actual impact and attack plausibility have not yet been proven...

PT-2022-36508 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: A potential memory leak issue was discovered in the Linux Kernel, specifically in the error path from the vfs getxattr alloc function. The actual impact and attack plausibility of this iss...

PT-2022-35973 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to a potential null pointer dereference in the kprobe event gen test exit function. This could potentially lead to security vulnerabilities, although the actual impact a...

PT-2022-36348 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: A memory leak issue exists in the query regdb file function related to cfg80211, which is a Linux kernel module for wireless networking. The actual impact and attack plausibility of this...

SUSE-SU-2022:4349-1 Security update for buildah

This update for buildah fixes the following issues: Version update to 1.28.2. - CVE-2022-2990: Fixed a possible information disclosure and modification vulnerability bsc1202812. - CVE-2020-10696: Fixed an issue with a crafted input tar file that may lead to a local file overwriting during image...

Vulnerabilities fixed in MobaXterm

Vulnerabilities have been fixed in Mobatek MobaXterm. The vulnerability allows a malicious party to bypass authentication bypass and connect unauthenticated via the SSH or SFTP protocol. Furthermore, a malicious party can perform a denial-of-service DoS exploit on the SFTP protocol. The...

PT-2022-27975

Name of the Vulnerable Software and Affected Versions PaddlePaddle versions prior to 2.4 Description The issue is an out-of-bounds read in the gather tree function. This problem affects PaddlePaddle versions before 2.4. A patch for this issue is available in the release/2.4 branch. Recommendation...