Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fixed an out-of-bounds write in kfdeventpageset. The kfdeventpageset function writes KFDSIGNALEVENTLIMIT 8 bytes via memset, without checking the buffer size parameter. This allows unprivileged userspace to trigger an...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iio: fixed a memory leak in iiodeviceregistereventset When iiodeviceregistersysfsgroup returns an error, iiodeviceregistereventset must free the attrs array. Otherwise, kmemleak will detect and report a memory leak as follows:...

CVE-2022-50561 iio: fix memory leak in iio_device_register_eventset()

In the Linux kernel, the following vulnerability has been resolved: iio: fix memory leak in iiodeviceregistereventset When iiodeviceregistersysfsgroup returns failed, iiodeviceregistereventset needs to free attrs array. Otherwise, kmemleak would scan & report memory leak as below: unreferenced...

DEBIAN-CVE-2022-49607

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perfeventsetoutput and perfmmapclose Yang Jihing reported a race between perfeventsetoutput and perfmmapclose: CPU1 CPU2 perfmmapclosee2 if atomicdecandtest&e2-rb-mmapcount // 1 - 0 detachrest =...

UBUNTU-CVE-2022-49607

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perfeventsetoutput and perfmmapclose Yang Jihing reported a race between perfeventsetoutput and perfmmapclose: CPU1 CPU2 perfmmapclosee2 if atomicdecandtest&e2-rb-mmapcount // 1 - 0 detachrest =...

PT-2025-8540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race has been identified between perf event set output and perf mmap close in the Linux kernel. This issue occurs when there is a concurrent execution of these two functions,...

PT-2022-32402

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v5.18.14 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-33047

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v4.19.253 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.1...

PT-2022-33119

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.290 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-32624

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v5.15.57 Description The issue is related to a data race between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 5.10.133 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-33174

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.325 Description The issue is related to a data race between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32948

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v5.4.207 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

kernel: perf_event_parse_addr_filter memory

A memory leak flaw was found in the Linux kernel’s performance monitoring subsystem when using PERFEVENTIOCSETFILTER. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability...

UBUNTU-CVE-2020-25704

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERFEVENTIOCSETFILTER. A local user could use this flaw to starve the resources causing denial of service...

Command injection

Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is less than expected length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

CVE-2019-14101

CVE-2019-14101 affects Qualcomm Snapdragon platforms (e.g., Auto, Compute, Connectivity, IOT, Mobile, Wearables) including APQ8009/8096 families and many MSM/SDM/QCS/SXR devices. The vulnerability is an out-of-bounds read in the diag event set mask command handler when the provided length in the ...

CVE-2019-14101: Out-of-bounds Read

Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is less than expected length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

PT-2020-9522

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions in APQ8009, APQ8096, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996,...