GSD-2022-1000552 drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit

dropmonitor: fix data-race in dropmonnetevent / tracenapipollhit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

GSD-2022-1000546 ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt

ipv6: fix data-race in fib6infohwflagsset / fib6purgert This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

GSD-2022-1000466 drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit

dropmonitor: fix data-race in dropmonnetevent / tracenapipollhit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...

GSD-2022-1000461 ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt

ipv6: fix data-race in fib6infohwflagsset / fib6purgert This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...

GSD-2022-1000460 ipv4: fix data races in fib_alias_hw_flags_set

ipv4: fix data races in fibaliashwflagsset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...

GSD-2022-1000353 drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit

dropmonitor: fix data-race in dropmonnetevent / tracenapipollhit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.181 by commit...

GSD-2022-1000329 drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit

dropmonitor: fix data-race in dropmonnetevent / tracenapipollhit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.231 by commit...

SUSE SLES12: kgraft-patch-4_4_180-94_138-default / etc (SUSE-SU-2022:0552-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0552-1 advisory. This update for the Linux Kernel 4.4.180-94138 fixes several issues. The following security issues were fixed: - CVE-2021-4202: Fix...

Use-After-Free

A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...

GSD-2022-1000277 af_packet: fix data-race in packet_setsockopt / packet_setsockopt

afpacket: fix data-race in packetsetsockopt / packetsetsockopt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.20 by commit...

GSD-2022-1000213 af_packet: fix data-race in packet_setsockopt / packet_setsockopt

afpacket: fix data-race in packetsetsockopt / packetsetsockopt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.97 by commit...

GSD-2022-1000166 af_packet: fix data-race in packet_setsockopt / packet_setsockopt

afpacket: fix data-race in packetsetsockopt / packetsetsockopt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.177 by commit...

GSD-2022-1000134 af_packet: fix data-race in packet_setsockopt / packet_setsockopt

afpacket: fix data-race in packetsetsockopt / packetsetsockopt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.228 by commit...

GSD-2022-1000108 af_packet: fix data-race in packet_setsockopt / packet_setsockopt

afpacket: fix data-race in packetsetsockopt / packetsetsockopt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.265 by commit...

GSD-2022-1000087 af_packet: fix data-race in packet_setsockopt / packet_setsockopt

afpacket: fix data-race in packetsetsockopt / packetsetsockopt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.300 by commit...

GO-2021-0224 Data race and crash in net/http

HTTP servers where the Handler concurrently reads the request body and writes a response can encounter a data race and crash. The httputil.ReverseProxy Handler is affected...

crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64

Impact The affected versions of this crate incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a 32-bit target can be smaller than AtomicI,U64. This can cause the following problems: - Unaligned memory accesses - Data race Crates...

CVE-2022-23639

crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a...

AZL-44763 CVE-2022-23639 affecting package ripgrep 13.0.0-12

crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a...

DEBIAN-CVE-2022-23639

crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a...