Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0755-1 Rating: important References: 1089644 1154353 1156395 1157038 1157923 1176447 1176940 1178134 1181147 1181588 1183872 1187716 1188404 1189126 1190812 1190972 1191580 1191655 1191741 1192210...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0760-1 Rating: important References: 1089644 1154353 1157038 1157923 1176447 1176940 1178134 1181147 1181588 1183872 1187716 1188404 1189126 1190812 1190972 1191580 1191655 1191741 1192210 1192483...

GSD-2022-1000566 HID: elo: fix memory leak in elo_probe

HID: elo: fix memory leak in eloprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit 80dad7483e3940dc9d9d55f8b34d1f4ba85a505...

GSD-2022-1000477 HID: elo: fix memory leak in elo_probe

HID: elo: fix memory leak in eloprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit de0d102d0c8c681fc9a3263d842fb35f7cf662f...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2022:0620)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0620-1 advisory. - kernel: use after free in eventpoll.c may lead to escalation of privilege CVE-2020-0466 - kernel: Use After Free in unixgc which could result i...

kernel security and bug fix update

3.10.0-1160.59.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...

kernel: out of bounds write in hid-multitouch.c may lead to escalation of privilege

A flaw was found in the Linux kernel’s multi-touch input system. An out-of-bounds write triggered by a use-after-free issue could lead to memory corruption or possible privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Security update for the Linux Kernel (critical)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0363-1 Rating: critical References: 1154353 1154488 1160634 1176447 1177599 1183405 1185377 1187428 1187723 1188605 1191881 1193096 1193506 1193767 1193802 1193861 1193864 1193867 1194048 1194227...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

pwnKit About: Title: pwnKit Description: Privilege esc...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

pwnKit About: Title: pwnKit Description: Privilege esc...

Important: kernel

Issue Overview: 2023-06-29: CVE-2023-28772 was added to this advisory. An issue in the HID driver in the Linux kernel may lead to invalid memory access. CVE-2022-20565 A flaw was found in the Linux kernel's implementation of BTRFS free space management, where the kernel does not correctly manage...

PT-2022-2275 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.11 Description: The issue is related to a memory leak in the Linux kernel, specifically in the drivers/hid/hid-elo.c component. This memory leak occurs under certain error conditions related to hid parse...

PT-2025-37629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The return value of the acpi fetch acpi dev function could be NULL, potentially leading to a NULL pointer dereference within the acpi device hid function. Recommendations At the moment,...

Exploit for Out-of-bounds Read in Nxp Lpc55S69Jbd100_Firmware

CVE-2021-40154...

kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() of hid-input.c

A flaw out of bounds memory write in the Linux kernel HID subsystem was found in the way user attach USB or other HID device that generates incorrect data inside HID report field. A local user could use this flaw to crash the system or possibly escalate their privileges on the system...

CVE-2021-33092

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit HID Event Filter driver pack before version 2.2.1.383 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33092

Intel NUC M15 Laptop Kit HID Event Filter driver pack has an issue: incorrect default installer permissions before version 2.2.1.383 may allow an authenticated local user to escalate privileges. The Red Hat/Intel advisory confirms the same CVE (CVE-2021-33092) and notes a local-access/vector scen...

Intel NUC 访问控制错误漏洞

The Intel NUC is a small minicomputer from Intel USA. An Access Control Error vulnerability exists in the Intel NUC M15 Laptop Kit HID Event Filter driver pack, which stems from a default privilege management error in the product's installer. An attacker could use this vulnerability to cause a...

kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() of hid-input.c

A flaw out of bounds memory write in the Linux kernel HID subsystem was found in the way user attach USB or other HID device that generates incorrect data inside HID report field. A local user could use this flaw to crash the system or possibly escalate their privileges on the system...

kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() of hid-input.c

A flaw out of bounds memory write in the Linux kernel HID subsystem was found in the way user attach USB or other HID device that generates incorrect data inside HID report field. A local user could use this flaw to crash the system or possibly escalate their privileges on the system...