RUSTSEC-2022-0017 `array!` macro is unsound when its length is impure constant

Affected versions of this crate did substitute the array length provided by an user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized...

`array!` macro is unsound when its length is impure constant

Affected versions of this crate did substitute the array length provided by an user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized...

mariadb: Integer overflow in sql_lex.cc integer leading to crash

An integer overflow vulnerability was found in MariaDB, where an invalid size of refpointerarray is allocated. This issue results in a denial of service...

GSD-2022-1001567 ASoC: codecs: va-macro: fix accessing array out of bounds for enum type

ASoC: codecs: va-macro: fix accessing array out of bounds for enum type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001260 ASoC: codecs: wc938x: fix accessing array out of bounds for enum type

ASoC: codecs: wc938x: fix accessing array out of bounds for enum type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001177 clk: visconti: prevent array overflow in visconti_clk_register_gates()

clk: visconti: prevent array overflow in visconticlkregistergates This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29704

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30734

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29910

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.17 Description The issue is related to the drm/virtio component, specifically in the virtio gpu array put free function, where it does not check if objs is NULL. This could potentially lead to security...

PT-2022-29450

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to preventing array overflow in the visconti clk register gates function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30563

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.239 Description The issue is related to a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30028

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.15.32 Description The issue is related to accessing an array out of bounds for an enum type in the va-macro codec. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30299

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-30216

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.32 Description The issue is related to the drm/virtio component, specifically in the virtio gpu array put free function, where it does not check if objs is NULL. This could potentially lead to security...

PT-2022-29607

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.17.1 Description The issue is related to the drm/virtio component, specifically in the virtio gpu array put free function, where it does not check if objs is NULL. This could potentially lead to security...

PT-2022-29729

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A bug in the imx-jpeg media module allows for accessing an array out of bounds. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29843

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.16.18 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30659

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For...