3627 matches found
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1681)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-29968
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
Code injection
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
CVE-2022-29968
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
CVE-2022-29968: Missing Initialization of Resource
An issue was discovered in the Linux kernel through 5.17.5. iorwinitfile in fs/iouring.c lacks initialization of kiocb-private...
PT-2022-2424
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.17.5 Description An issue was discovered in the Linux kernel where the io rw init file function in fs/io uring.c lacks initialization of kiocb-private. This issue is related to errors in initialization and may...
Privilege Escalation
qemu is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authorization which allows an attacker to create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is...
PT-2022-38126
Уязвимость функции recover dot dentries модуля fs/f2fs/namei.c поддержки файловой системы F2FS ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2022-37957
Уязвимость функции f2fs drop inmem page модуля fs/f2fs/segment.c поддержки файловой системы F2FS ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
TerraMaster FS-210安全漏洞
The Terramaster TerraMaster FS-210 is a NAS Network Attached Storage device from Tumi Electronic Technology Terramaster in Shenzhen, China. A security vulnerability exists in Terramaster F4-210, F2-210 TOS 4.2.X 4.2.15-2107141517, which can be exploited by sending a special command to...
GSD-2022-1002059 fs: fix fd table size alignment properly
fs: fix fd table size alignment properly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...
PT-2022-29871
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a potential fs corruption when trying to remove a non-empty directory with an IO error. The actual impact and attack plausibility have not yet been proven...
PT-2022-30785
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do mount fs function. This problem was introduced in version v2.6.15 and fixed in version...
PT-2022-30408
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do mount fs function. This problem was introduced in version v2.6.15 and fixed in version...
PT-2022-30646
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A memory leak issue was discovered in the jffs2 file system. The issue is related to the jffs2 do mount fs function. This problem was introduced in version v2.6.15 and is fixed in version...
CVE-2022-29582
CVE-2022-29582 refers to a use-after-free in the Linux kernel io_uring timeout handling. The vulnerability resides in fs/io_uring.c and stems from a race condition in io_uring timeouts that can be triggered by a local user who does not have access to any user namespace. The initial description no...
CVE-2022-29582
In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...
CVE-2022-29582: Concurrent Execution using Shared Resource with Improper Synchronization
In the Linux kernel before 5.17.3, fs/iouring.c has a use-after-free due to a race condition in iouring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only be exploited infrequently...
PT-2022-3035
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw was found in the dx insert block function in fs/ext4/namei.c of the Linux kernel's filesystem sub-component. This issue is related to the use of memory after it has...