PT-2022-26366 · Unknown · Oxenstored

Name of the Vulnerable Software and Affected Versions: Oxenstored versions 32-bit builds Description: The issue arises from the Ocaml Xenbus library taking a C uint32 t out of the ring and casting it directly to an Ocaml integer. In 32-bit builds, this causes a truncation of the most significant...

CVE-2022-42324

Oxenstored 32-31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32t out of the ring and casts it directly to an Ocaml integer. In 64-bit Ocaml builds this is fine, but in 32-bit builds, it truncates off the most...

CVE-2022-42324: Incorrect Conversion between Numeric Types

Oxenstored 32-31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32t out of the ring and casts it directly to an Ocaml integer. In 64-bit Ocaml builds this is fine, but in 32-bit builds, it truncates off the most...

EulerOS Virtualization 2.9.1 : curl (EulerOS-SA-2022-2341)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated...

GSD-2022-1006067 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005748 net: Fix a data-race around sysctl_net_busy_poll.

net: Fix a data-race around sysctlnetbusypoll. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

PT-2022-34197 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.11 through 5.4.211 Description: A data-race issue exists around sysctl net busy poll. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.11 through 5.4.211,...

PT-2022-34458

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.292 Description A data-race issue exists around sysctl net busy poll. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.292, update...

PT-2022-34343

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.257 Description A data-race issue exists around sysctl net busy poll. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.19.257, update...

PT-2022-34006 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.140 Description: A data-race issue exists around sysctl net busy poll. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.10.140,...

PT-2022-34537 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.291 Description: The issue is related to the KVM x86 emulation of the LTR instruction, where the TSS is marked busy after all fault checks. The actual impact and attack plausibility have not yet been prove...

PT-2022-34325 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.17 through 5.4.210 Description: The issue is related to the KVM x86 component, specifically with the handling of the LTR emulation. The problem arises when marking the TSS busy during this emulation, potentially after...

PT-2022-34546

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.327 Description A data-race issue exists around sysctl net busy read. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.9.327, update t...

PT-2022-34456

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.292 Description A data-race issue exists around sysctl net busy read. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.292, update...

PT-2022-34342

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.257 Description The issue is related to a data-race around sysctl net busy read. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.11 and fixed in Linux...

PT-2022-33954

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.17 through v5.15.60 Description The issue is related to the KVM x86 component, specifically with the LTR emulation. It involves marking the TSS busy after all fault checks. The actual impact and potential for attack ha...

PT-2022-33821

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description The issue is related to a potential panic in the dl cpu busy function due to an empty cs-cpus allowed. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-33301 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: A data-race issue exists around sysctl net busy read. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.11 and fixed in Linux Kernel version...

PT-2022-33706

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.64 Description A data-race issue exists around sysctl net busy read. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.11 and fixed in Linux Kernel version...

PT-2022-33305 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: A data-race issue exists around sysctl net busy poll. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.19.6, update ...