13787 matches found
GSD-2022-1006443 ieee802154: cc2520: add rc code in cc2520_tx()
ieee802154: cc2520: add rc code in cc2520tx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.294 by commit...
GSD-2022-1006440 drm/radeon: add a force flush to delay work when radeon
drm/radeon: add a force flush to delay work when radeon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.258 by commit...
GSD-2022-1006437 debugfs: add debugfs_lookup_and_remove()
debugfs: add debugfslookupandremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.258 by commit ebfb744bb6036485dac2a45c46e82b911c3726d1...
GSD-2022-1006425 ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
ALSA: usb-audio: Fix an out-of-bounds bug in sndusbparseaudiointerface This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.213 by commit...
GSD-2022-1006410 ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
ALSA: usb-audio: Fix an out-of-bounds bug in sndusbparseaudiointerface This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.143 by commit...
GSD-2022-1006403 sch_sfb: Don't assume the skb is still around after enqueueing to child
schsfb: Don't assume the skb is still around after enqueueing to child This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.143 by commit...
GSD-2022-1006397 of: fdt: fix off-by-one error in unflatten_dt_nodes()
of: fdt: fix off-by-one error in unflattendtnodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.145 by commit...
GSD-2022-1006387 vfio/type1: Unpin zero pages
vfio/type1: Unpin zero pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit 5321908ef74fb593e0dbc8737d25038fc86c9986. For mo...
GSD-2022-1006384 sched/debug: fix dentry leak in update_sched_domain_debugfs
sched/debug: fix dentry leak in updatescheddomaindebugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...
GSD-2022-1006377 sch_sfb: Don't assume the skb is still around after enqueueing to child
schsfb: Don't assume the skb is still around after enqueueing to child This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...
GSD-2022-1006372 erofs: fix pcluster use-after-free on UP platforms
erofs: fix pcluster use-after-free on UP platforms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...
GSD-2022-1006370 RDMA/irdma: Report the correct max cqes from query device
RDMA/irdma: Report the correct max cqes from query device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...
GSD-2022-1006366 cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
cgroup: Add missing cpusreadlock to cgroupattachtaskall This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.70 by commit...
GSD-2022-1006359 drm/radeon: add a force flush to delay work when radeon
drm/radeon: add a force flush to delay work when radeon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006354 vfio/type1: Unpin zero pages
vfio/type1: Unpin zero pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit 5d721bf222936f5cf3ee15ced53cc483ecef7e46. For mor...
GSD-2022-1006345 tee: fix compiler warning in tee_shm_register()
tee: fix compiler warning in teeshmregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006331 swiotlb: avoid potential left shift overflow
swiotlb: avoid potential left shift overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
ZKSecurity BIO 4.1.2 SQL Injection / Code Execution
ADVISORY INFORMATION Product: ZKSecurity BIO Vendor: ZKTeco https://www.zkteco.com/en/ZKBiosecurity/ZKBioSecurityV50004.1.2 Version Affected: 4.1.2 CVE: CVE-2022-36635 Vulnerability: SQL Injection with a plus: RCE CREDIT This vulnerability was discovered and researched by Caio Burgardt and Silton...
