434 matches found
GSD-2022-1007218 soundwire: cadence: Don't overwrite msg->buf during write commands
soundwire: cadence: Don't overwrite msg-buf during write commands This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
PT-2022-35263 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to the soundwire cadence, where msg-buf is overwritten during write commands. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
Unbreakable Enterprise kernel security update
5.15.0-3.60.5.1 - fs: remove nollseek Jason A. Donenfeld Orabug: 34721465 - vfio: do not set FMODELSEEK flag Jason A. Donenfeld Orabug: 34721465 - dma-buf: remove useless FMODELSEEK flag Jason A. Donenfeld Orabug: 34721465 - fs: do not compare against -llseek Jason A. Donenfeld Orabug: 34721465 -...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:2173-1 Rating: important References: 1177282 1199365 1200015 1200143 1200144 1200206 1200207 1200249 1200259 1200263 1200268 1200529 Cross-References: CVE-2020-26541 CVE-2022-1966 CVE-2022-1974...
PT-2022-4520
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0322 Description The issue is related to a Use After Free vulnerability in the qf buf add line function of the Vim text editor. This vulnerability can be exploited to impact the confidentiality, integrity, and...
PT-2025-25866
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference can occur when attempting to access the gsm-receive function in gsmld receive buf. This happens because the gsmld receive buf function can be accessed without...
PT-2022-37836
Уязвимость функции begin cpu udmabuf модуля drivers/dma-buf/udmabuf.c 2 ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
PT-2025-25861
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the dma-buf/dma-resv component, where a check was added to ensure that a new fence is really later than...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-2075)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-20228
In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12...
PT-2022-7128
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0101 Description The issue is related to a heap-based buffer overflow in the vim iswordp buf function of the Vim text editor. This allows an attacker to access confidential data, compromise its integrity, and...
PT-2022-31935
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are separated. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-31731
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are not properly separated. This is an automated identification of a potential security issue, but the actual impact...
EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1779)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attack...
Out-of-bound Reads
linux kernel is vulnerable to out-of bound reads. The vulnerability exists in drivers/usb/gadget/legacy/inode.c due to mishandling in dev-buf release which allows an attacker to cause an application crash...
CVE-2021-0707
In dmabufrelease of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
GSD-2022-1000661 dma-buf: heaps: Fix potential spectre v1 gadget
dma-buf: heaps: Fix potential spectre v1 gadget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...
GSD-2022-1000578 dma-buf: heaps: Fix potential spectre v1 gadget
dma-buf: heaps: Fix potential spectre v1 gadget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...
GSD-2022-1000222 dma-buf: heaps: Fix potential spectre v1 gadget
dma-buf: heaps: Fix potential spectre v1 gadget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...
