CLSA-2023-1682605601 Fix of 53 CVEs

CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by modtimer Bionic update: upstream stable patchset 2022-03-04 LP: 1963717 // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets CVE-2022-36879 - xfrm: xfrmpolicy: fix a possible double xfrmpolsput in...

CLSA-2023-1682604577 Fix of 53 CVEs

CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by modtimer Bionic update: upstream stable patchset 2022-03-04 LP: 1963717 // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets CVE-2022-36879 - xfrm: xfrmpolicy: fix a possible double xfrmpolsput in...

GSD-2022-1002153 ax25: Fix UAF bugs in ax25 timers

ax25: Fix UAF bugs in ax25 timers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.190 by commit a83a18c4c9033fb6604c587f52a2d78857cf0ac2. F...

GSD-2022-1002072 ax25: Fix NULL pointer dereferences in ax25 timers

ax25: Fix NULL pointer dereferences in ax25 timers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.112 by commit...

PT-2022-29464

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.1 Description The issue concerns NULL pointer dereferences in ax25 timers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.17 through...

PT-2022-30426

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue is related to use-after-free UAF bugs in ax25 timers. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.4.190, update to...

PT-2022-30508

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue concerns NULL pointer dereferences in ax25 timers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.190,...

PT-2022-29912

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue is related to use-after-free UAF bugs in ax25 timers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.35...

PT-2022-30345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue concerns NULL pointer dereferences in ax25 timers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.112,...

PT-2022-30217

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue is related to use-after-free UAF bugs in ax25 timers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30099

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue concerns NULL pointer dereferences in ax25 timers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.35,...

PT-2022-29229

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description The issue is related to use-after-free UAF bugs in ax25 timers. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.17.4,...