PT-2022-35488

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description The issue is related to a NULL pointer dereference in the lt9611 connector init function. This problem has been identified but its actual impact and potential for attack have not been...

PT-2022-35681 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to the handling of an error returned from sctp auth asoc init active key. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-35911

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description A refcount leak was discovered in the xvip graph dma init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-35528 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.9 through 5.10.149 Description: The issue is related to a refcount leak in the tegra20 clock init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35448 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.152 Description: The issue is related to a null pointer access in the cake init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-35665 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.9 through 5.4.219 Description: A refcount leak was discovered in the tegra20 clock init function. The issue was introduced in version 3.9 and is fixed in version 5.4.220. Recommendations: For Linux Kernel versions 3.9...

PT-2022-34932 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to a null pointer access in the cake init function. It was introduced in version v4.19 and fixed in version v6.0.6. The actual impact and attack plausibility have not yet...

PT-2022-35848 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.9 through 4.14.295 Description: A refcount leak was discovered in the tegra20 clock init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.9...

PT-2022-35770

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 4.19.261 Description A refcount leak was discovered in the tegra20 clock init function. The issue was introduced in version v3.9 and is fixed in Linux Kernel version v4.19.262. Recommendations For Linux Kernel...

PT-2022-35114

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.3 Description The issue is related to the use of hci dev test and set flag in mgmt init hdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-35908

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description The issue is related to a refcount leak in the tegra20 clock init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-35642 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to the Bluetooth L2CAP protocol in the Linux Kernel. It involves the initialization of delayed works at the l2cap chan create function. The actual impact and attack...

PT-2022-35907

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description The issue is related to a refcount leak in the tegra114 clock init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-35913

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description The issue is related to a refcount leak in the tegra210 clock init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-35077

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v6.0.2 Description The issue is related to a refcount leak in the tegra114 clock init function. This problem was introduced in version v3.10 and is fixed in Linux Kernel version v6.0.3. The actual impact and...

PT-2022-35232 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue is related to a null pointer access in the cake init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2022-34944

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.6 Description The issue is related to a use-after-free UAF problem in the ip6mr sk done function when addrconf init net fails. The actual impact and attack plausibility have not yet been proven...

PT-2024-11886

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak issue has been resolved in the Linux kernel. The ixgbevf init module function did not destroy the workqueue created by create singlethread workqueue when pci register...

CVE-2022-39393 Wasmtime vulnerable to data leakage between instances in the pooling allocator

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of the prior instance can be visible, erroneously ...

CVE-2022-39393: Sensitive Information in Resource Not Removed Before Reuse

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of the prior instance can be visible, erroneously ...