Medium: kernel

Issue Overview: An out-of-bounds read flaw was found in the Linux kernel's TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flushtoldisc function. This flaw allows a local user...

GSD-2022-1004918 icmp: Fix data-races around sysctl.

icmp: Fix data-races around sysctl. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.324 by commit 1740e5922fbb705637ae9fa5203db132fc45f9f6,...

GSD-2022-1004907 igmp: Fix data-races around sysctl_igmp_llm_reports.

igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.325 by commit...

GSD-2022-1004866 cipso: Fix data-races around sysctl.

cipso: Fix data-races around sysctl. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.289 by commit c321e99d2725d11f7e6a4ebd9ce752259f0bae8...

GSD-2022-1004865 icmp: Fix data-races around sysctl.

icmp: Fix data-races around sysctl. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.289 by commit 53ecd09ef2fb35fa69667ae8e414ef6b00fd3bf6...

GSD-2022-1004850 igmp: Fix data-races around sysctl_igmp_llm_reports.

igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.290 by commit...

GSD-2022-1004796 icmp: Fix data-races around sysctl.

icmp: Fix data-races around sysctl. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.253 by commit edeec63b13c252193d626c2a48d7a2f0e7016dc2...

GSD-2022-1004781 tcp: Fix data-races around sysctl_tcp_mtu_probing.

tcp: Fix data-races around sysctltcpmtuprobing. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004777 igmp: Fix data-races around sysctl_igmp_llm_reports.

igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004775 tcp: Fix data-races around sysctl_tcp_fastopen.

tcp: Fix data-races around sysctltcpfastopen. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004772 tcp: Fix data-races around sysctl_tcp_recovery.

tcp: Fix data-races around sysctltcprecovery. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004770 tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.

tcp: Fix data-races around sysctltcpslowstartafteridle. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004769 tcp: Fix data-races around sysctl_tcp_max_reordering.

tcp: Fix data-races around sysctltcpmaxreordering. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004701 icmp: Fix data-races around sysctl.

icmp: Fix data-races around sysctl. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit 0cba7ca667ceb06934746ddd9833a25847bde81d,...

GSD-2022-1004700 cipso: Fix data-races around sysctl.

cipso: Fix data-races around sysctl. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit 0e41a0f73ccb9be112a80bde3804a771633caaef...

GSD-2022-1004684 ip: Fix data-races around sysctl_ip_fwd_use_pmtu.

ip: Fix data-races around sysctlipfwdusepmtu. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.208 by commit...

GSD-2022-1004681 tcp: Fix data-races around sysctl_tcp_mtu_probing.

tcp: Fix data-races around sysctltcpmtuprobing. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.208 by commit...

GSD-2022-1004680 tcp: Fix data-races around sysctl_tcp_base_mss.

tcp: Fix data-races around sysctltcpbasemss. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.208 by commit...

GSD-2022-1004674 igmp: Fix data-races around sysctl_igmp_llm_reports.

igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.208 by commit...

GSD-2022-1004672 tcp: Fix data-races around sysctl_tcp_fastopen.

tcp: Fix data-races around sysctltcpfastopen. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.208 by commit...