PT-2022-37883

Уязвимость функции lpfc issue cmf sync wqe модуля drivers/scsi/lpfc/lpfc sli.c драйвера устройств SCSI ядра операционной системы Linux связана с неправильным освобождением памяти «утечка памяти». Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel (HWE) vulnerability (USN-5493-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5493-2 advisory. It was discovered that the 8 Devices USB2CAN interface implementation in the Linux kernel did not properly handle certain error conditions, leading to...

kernel security and bug fix update

5.14.0-70.17.1.0.10.OL9 - lockdown: also lock down previous kgdb use Daniel Thompson Orabug: 34290418 CVE-2022-21499 5.14.0-70.17.10.OL9 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted...

PT-2022-37687

The Linux Kernel, the operating system core itself. Security Fixes: NFC: netlink: fix sleep in atomic bug when firmware download timeoutCVE-2022-1975 In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalati...

SUSE SLES12 Security Update : kernel (Live Patch 31 for SLE 12 SP5) (SUSE-SU-2022:2195-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:2195-1 advisory. - A flaw in Linux Kernel found in nfcmrvlnciunregisterdev in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non...

GSD-2022-1004004 drivers/base/node.c: fix compaction sysfs file leak

drivers/base/node.c: fix compaction sysfs file leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003937 drivers: usb: host: Fix deadlock in oxu_bus_suspend()

drivers: usb: host: Fix deadlock in oxubussuspend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003827 drivers: tty: serial: Fix deadlock in sa1100_set_termios()

drivers: tty: serial: Fix deadlock in sa1100settermios This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003772 thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe

thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003681 drivers: tty: serial: Fix deadlock in sa1100_set_termios()

drivers: tty: serial: Fix deadlock in sa1100settermios This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003594 thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe

thermal/drivers/imxscthermal: Fix refcount leak in imxscthermalprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003346 thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe

thermal/drivers/imxscthermal: Fix refcount leak in imxscthermalprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1002742 thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe

thermal/drivers/imxscthermal: Fix refcount leak in imxscthermalprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002547 drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()

drivers: staging: rtl8192u: Fix deadlock in ieee80211beaconsstop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

PT-2022-30999

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential NULL dereference issue was identified in the sr thermal probe function of the thermal drivers for Broadcom. The actual impact and attack plausibility have not yet been proven...

PT-2022-31856

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential NULL dereference issue was identified in the sr thermal probe function of the thermal drivers for Broadcom in the Linux Kernel. The actual impact and attack plausibility have not...

PT-2022-38059

Уязвимость функции tun detach all модуля drivers/net/tun.c драйвера поддержки сетевых устройств ядра операционной системы Linux связана с утечкой памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Use After Free

kernel is vulnerable to use after free. The vulnerability exists due to a memory corruption in the hsofreenetdevice function of drivers/net/usb/hso.c which allows an attacker to escalate their privileges on the system...

CVE-2022-33981

A use-after-free flaw was found in drivers/block/floppy.c in floppy drive in the Linux Kernel. This issue could allow a local attacker to crash the system due to a race problem between rawcmdioctl and seekinterrupt, which can lead to a kernel information leak...

PT-2022-38052

Уязвимость функции uvcg video pump модуля drivers/usb/gadget/function/uvc video.c драйвера поддержки гаджетов USB ядра операционной системы Linux связана с раскрытием конфиденциальной информации. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность,...