[SECURITY] Fedora 36 Update: tpm2-tss-3.2.2-1.fc36

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 syst em APIs. It sits between TPM driver and applications, providing TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers...

CVE-2022-37340

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36797

Protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-36797

Protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-37340

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-27808

Insufficient control flow management in some IntelR Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

Default configuration

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-30531

Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30531

Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-27808

Insufficient control flow management in some IntelR Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-27808

Affected software : Intel® Ethernet Controller Administrative Tools drivers for Windows (pre-1.5.0.2). Root cause : Insufficient control flow management within the affected drivers. Impact : An authenticated user with local access may potentially escalate privileges. Evidence : CVE-2022-27808 des...

CVE-2022-37340

The CVE-2022-37340 issue affects Intel(R) QuickAssist Technology (QAT) drivers for Windows prior to version 1.6. The vulnerability is an uncontrolled search path in the driver, which could allow an authenticated local user to escalate privileges. Public sources (NVD, Red Hat, Intel advisory) alig...

CVE-2022-37340

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36397

CVE-2022-36397 affects Intel® QuickAssist Technology (QAT) drivers for Linux prior to version 4.17. The issue is caused by incorrect default permissions in the software installer, which may allow an authenticated local user to escalate privileges. Intel’s advisory and Red Hat/NVD/Nessus reference...

CVE-2022-36397

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36397

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36797

Protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-34849

Uncaught exception in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1436v2 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-30531

The CVE-2022-30531 issue affects Intel® Iris® Xe MAX drivers for Windows prior to version 100.0.5.1474. The root cause is an out-of-bounds read in the driver, which may allow a privileged local attacker to disclose information. Intel’s advisory and vendor entries confirm the affected product fami...