SUSE-SU-2022:1318-1 Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP4)

This update for the Linux Kernel 4.12.14-9580 fixes several issues. The following security issues were fixed: - CVE-2022-1016: Fixed a vulnerability in the nftables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from a...

OSV-2022-359 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46788 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

CVE-2022-1280

CVE-2022-1280 is a Linux kernel use-after-free in drm_lease_held (drivers/gpu/drm/drm_lease.c) caused by a race. Exploitation may enable local privilege attackers to cause DoS or kernel information leak. Connected docs also reference a separate disclosure chain noting a race between drm_setmaster...

CVE-2022-29156

drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrscltdevrelease...

USN-5377-1: Linux kernel (BlueField) vulnerabilities

It was discovered that the network traffic control implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-1055 Yiqi Sun and Kevin Wang discovered that the...

Double free

Tcpreplay v4.4.1 was discovered to contain a double-free via interceptorfree...

CVE-2022-1280

A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak. Mitigation Mitigation for this issue is either not...

KLA12501 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of...

Double free in Regexp compilation

A double-free vulnerability is discovered in Regexp compilation. This vulnerability has been assigned the CVE identifier CVE-2022-28738. We strongly recommend upgrading Ruby. Due to a bug in the Regexp compilation process, creating a Regexp object with a crafted source string could cause the same...

Design/Logic Flaw

A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

MGASA-2022-0133 Updated usbredir packages fix security vulnerability

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparserserialize in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination. CVE-2021-3700...

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

SUSE-SU-2022:1123-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2020-1752: Fix use-after-free in glob when expanding user bsc1167631...

SUSE SLES11: libfreebl3 / libfreebl3-32bit / libsoftokn3 / libsoftokn3-32bit / etc (SUSE-SU-2022:14936-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:14936-1 advisory. Mozilla NSS 3.68.3 bsc1197903: - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS11 tokens are removed while in use. Tenable h...

CVE-2022-28388

usb8devstartxmit in drivers/net/can/usb/usb8dev.c in the Linux kernel through 5.17.1 has a double free...

CVE-2022-1055

A use-after-free vulnerability was found in the tcnewtfilter function in net/sched/clsapi.c in the Linux kernel. The availability of local, unprivileged user namespaces allows privilege escalation. Mitigation On non-containerized deployments of Red Hat Enterprise Linux 8, you can disable user...

CVE-2022-1195

A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of service DOS when the mkiss or sixpack device is detached and reclaim resources early. Mitigation Mitigation for this issue is either n...

SUSE-SU-2022:1035-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-2461 fixes several issues. The following security issues were fixed: - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 releaseagent feature, which allowed bypassing namespace isolation unexpectedly bsc1195543. - CVE-2022-0487: A...

SUSE SLES12: kernel-livepatch-4_12_14-150_72-default / etc (SUSE-SU-2022:1012-1)

The remote SUSE Linux SLES12 / SLES15 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1012-1 advisory. This update for the Linux Kernel 4.12.14-122103 fixes several issues. The following security issues were fixed: -...

SUSE-SU-2022:1012-1 Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94150 fixes several issues. The following security issues were fixed: - CVE-2022-0487: A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c bsc1194516. - CVE-2022-0492: Fixed a privilege escalation related to...