PT-2022-29164

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.4.182 Linux Kernel versions 3.8 through 5.4.181 Description The issue is related to setting ipv6 fields, which can cause hw csum failure. The actual impact and attack plausibility have not yet been proven...

PT-2022-29017

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.16.12 Description The issue is related to setting ipv6 fields, which can cause hw csum failure. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.16.12...

PT-2022-28995

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.13 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-29225

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to the version with commit 952d01d70a5b90808e8c808f96fbfd432644975e Description The issue is related to setting ipv6 fields, which can cause hw csum failure. The actual impact and attack plausibility have not yet bee...

PT-2022-29200

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.270 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-29083

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.15.26 Description The issue is related to setting ipv6 fields, which can cause hw csum failure. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.15.26...

PT-2022-28735

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description A data-race issue exists in the fib6 info hw flags set and fib6 purge rt functions. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-28915

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.16.5 Description The issue is related to a wrong calculation of the header index in HW GRO. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-28734

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15.24 Description The issue concerns data races in fib alias hw flags set. It was introduced in version v5.6 and fixed in version v5.15.25. The actual impact and attack plausibility have not yet been prove...

PT-2022-28820

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description A data-race issue exists in the fib6 info hw flags set and fib6 purge rt functions. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

NULL Pointer Dereference

qemu is vulnerable to null pointer dereference. The vulnerability exists due to an invalid pointer dereference in the function pciwrite in hw/acpi/pcihp.c allowing an attacker to crash the system...

CVE-2022-20015

In kdcamerahw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862966; Issue ID: ALPS05862966...

MediaTek 芯片安全漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in the MediaTek kdcamerahw driver, which originates from a possible information disclosure in the kdcamerahw driver due to uninitialized data. This could result in the...

PT-2021-27018

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.7 Description The issue concerns an out-of-bounds read and write in the hw atl utils fw rpc wait function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-26949

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.84 Description The issue concerns an out-of-bounds read and write in hw atl utils fw rpc wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-26880

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.220 Description The issue concerns an out-of-bounds OOB read and write in hw atl utils fw rpc wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26908

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.164 Description The issue concerns an out-of-bounds read and write in hw atl utils fw rpc wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

WS-2021-0556

Linux/Kernel is vulnerable to leak of rcvhdrtaildummykvaddr in drivers/infiniband/hw/hfi1/init.c...

In the Linux kernel through 5.15.2 hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.

...

libgcrypt security and bug fix update

1.8.5-6 - Fix for CVE-2021-33560 1971421 - Enable HW optimizations in FIPS 1976137 - Performance enchancements for ChaCha20 and Poly1305 1855231 1.8.5-5 - Performance enchancements for AES-GCM, CRC32 and SHA2 1855231...