GSD-2022-1003346 thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe

thermal/drivers/imxscthermal: Fix refcount leak in imxscthermalprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1002742 thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe

thermal/drivers/imxscthermal: Fix refcount leak in imxscthermalprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002547 drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()

drivers: staging: rtl8192u: Fix deadlock in ieee80211beaconsstop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

Use After Free

kernel is vulnerable to use after free. The vulnerability exists due to a memory corruption in the hsofreenetdevice function of drivers/net/usb/hso.c which allows an attacker to escalate their privileges on the system...

CVE-2022-33981

A use-after-free flaw was found in drivers/block/floppy.c in floppy drive in the Linux Kernel. This issue could allow a local attacker to crash the system due to a race problem between rawcmdioctl and seekinterrupt, which can lead to a kernel information leak...

MAL-2022-6728 Malicious code in ubuntu-drivers-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 120a9ee8cb577eade82f53c379544a55221c7b75001fb6db79c586624c380d31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ubuntu-drivers-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 120a9ee8cb577eade82f53c379544a55221c7b75001fb6db79c586624c380d31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4513 Malicious code in mbed-drivers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa95e81aa25f6f1b237d535835cd3e38b8f8325fcd50a5e352f9f804d3ee7b3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mbed-drivers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa95e81aa25f6f1b237d535835cd3e38b8f8325fcd50a5e352f9f804d3ee7b3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Realtek USB driver 安全漏洞

The Realtek USB driver is a series of gaming Ethernet family controller drivers from China-based Realtek Semiconductor Realtek. A security vulnerability exists in the Realtek USB FE/1GbE/2.5GbE/5GbE NIC Family, which stems from insufficient validation of parameter lengths in API functions. An...

Double Free

linux is vulnerable to double free. The vulnerability exists due to a memory corruption in the mcbausbstartxmit in drivers/net/can/usb/mcbausb.c which allow an attacker to cause an application crash...

DEBIAN-CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

UBUNTU-CVE-2022-20166

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

The vulnerability of the scsi_ioctl function in the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the scsiioctl function drivers/scsi/scsiioctl.c in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Qualcomm 缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and from time to time manufactured on the surface of semiconductor wafers. A security vulnerability exists in several Qualcomm products that...

PUB-A-182388481

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Tuxera NTFS-3G Code Injection Vulnerability

Tuxera NTFS-3G is an open-source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.A code injection vulnerability exists in Tuxera NTFS-3G, which stems from the presence of an invalid return code in fusekernmount. No detailed vulnerability details ar...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2022-82645)

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.A buffer overflow vulnerability exists in Tuxera NTFS-3G, which stems from a boundary error in ntfschecklogclientarray when handling untrusted input, and could be...

Tuxera NTFS-3G numeric error vulnerability

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.Tuxera NTFS-3G suffers from a numeric error vulnerability that originates from integer underflow in fuselibreaddir, which can be exploited by attackers to cause...