GSD-2022-1002550 extcon: Modify extcon device to be created after driver data is set

extcon: Modify extcon device to be created after driver data is set This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

PT-2022-32143

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue allows probing without .driver data, which may potentially lead to security vulnerabilities. However, the actual impact and attack plausibility have not yet been proven...

PT-2022-32251

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue allows probing without .driver data, which may potentially lead to security vulnerabilities. However, the actual impact and attack plausibility have not yet been proven...

PT-2022-32015

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue allows probing without .driver data, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to an incorrect assignment of driver data in the arm ffa firmware. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32202

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to the extcon device creation, which is modified to be created after driver data is set. The actual impact and attack plausibility have not yet been proven...

PT-2022-31155

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to the extcon device creation process. It has been modified to be created after driver data is set. The actual impact and attack plausibility of this issue have not yet...

PT-2022-32085

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the extcon device creation, which is modified to be created after driver data is set. The actual impact and attack plausibility have not yet been proven...

PT-2022-31628

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue allows probing without .driver data, which may potentially lead to security vulnerabilities. However, the actual impact and attack plausibility have not yet been proven...

CVE-2021-23279

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in metadriversrv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete...

CVE-2021-23279

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in metadriversrv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete...

Uber Reveals 2016 Breach of 57 Million User Accounts

Ride-hailing service Uber Technologies revealed Tuesday that the company suffered a breach of 57 million Uber user accounts in 2016. According to reports, Uber then attempted to cover up the incident by paying $100,000 to attackers to keep the hack a secret and delete the data. Dara Khosrowshahi,...

USN-2843-2 linux-lts-wily vulnerabilities

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS. CVE-2015-8104 郭永刚 discovered that the pp...

CVE-2007-2488

The IAX2 channel driver chaniax2 in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information memory contents or cause a denial of service application crash, by sending a frame that...