SUSE CVE-2023-3312

A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to double release problem leading to denial of service...

qemu security update

15:4.2.1-26.el7 - migration: check magic value for deciding the mapping of channels manish.mishra Orabug: 34735462 - io: Add support for MSGPEEK for socket channel manish.mishra Orabug: 34735462 - migration: Move channel setup out of postcopytryrecover Peter Xu Orabug: 34735462 - vdpa: commit all...

CVE-2021-46887

Lack of length check vulnerability in the HWKEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read...

kernel: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

An out-of-bounds write vulnerability exists in the linux kernel, such that when mlx5ibgethwstats is used forthe device portnum = 0, There is a special handling in order to use the correct counters, but, portnum is being passed down the stack without any change leading to damage in system...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

GSD-2023-1001513 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()

cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001216 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()

cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000843 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()

cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

CVE-2021-46868

The HWKEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access...

RHEL 9 : kernel (RHSA-2022:8267)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8267 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: off-path attacker may inject data or...

GSD-2022-1006838 drm/msm: Make .remove and .shutdown HW shutdown consistent

drm/msm: Make .remove and .shutdown HW shutdown consistent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35218 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to a hang in the cti disable hw function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

RHEL 8 : kernel-rt (RHSA-2022:6991)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6991 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

PT-2022-25954 · Unknown · Hw Keymaster

Name of the Vulnerable Software and Affected Versions: HW KEYMASTER affected versions not specified Description: The issue is related to the HW KEYMASTER module not verifying the data it reads. This can lead to malicious construction of data, resulting in out-of-bounds access. Recommendations: At...

PT-2022-25955 · Unknown · Hw Keymaster

Name of the Vulnerable Software and Affected Versions: HW KEYMASTER affected versions not specified Description: The issue is related to the HW KEYMASTER module not verifying the data it reads. This could potentially allow for malicious construction of data, leading to out-of-bounds access...

Use After Free

qemu:sid is vulnerable to use after free. It allowed a remote attacker to potentially execute HW commands when shared buffers...

Medium: microcode_ctl

Issue Overview: Sensitive information accessible by physical probing of JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access. CVE-2022-0005 A flaw was found in hw. The APIC can operate in xAPIC mode also...

HUAWEI EMUI和Magic UI 安全漏洞

Huawei EMUI is a mobile operating system developed on Android. Huawei Magic UI is a smart device operating system. Huawei EMUI and Magic UI are vulnerable to an information disclosure vulnerability that originates from the issue of writing data to an arbitrary address in the HWKEYMASTER module,...

PT-2022-11162 · Unknown · Hw Keymaster

Name of the Vulnerable Software and Affected Versions: HW KEYMASTER module affected versions not specified Description: The issue concerns the HW KEYMASTER module, where there is a vulnerability related to writing data to an arbitrary address. This could potentially impact confidentiality if...

RHEL 7 : kernel-rt (RHSA-2022:5939)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5939 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...