GSD-2022-1001400 dm ioctl: prevent potential spectre v1 gadget

dm ioctl: prevent potential spectre v1 gadget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001058 dm ioctl: prevent potential spectre v1 gadget

dm ioctl: prevent potential spectre v1 gadget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-29331

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.3 Description The issue is related to a potential Spectre v1 gadget in the dm ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29376

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed i...

PT-2022-29673

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a potential Spectre v1 gadget in the dm ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A NULL pointer dereference issue was found in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29998

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a potential Spectre v1 gadget in the dm ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29703

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed ...

PT-2022-30082

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A memory leak was discovered in the acrn dev ioctl function. The issue was introduced in version v5.12 and is fixed in Linux Kernel version v5.15.33. Recommendations For Linux Kernel versions...

PT-2022-29883

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to preventing bad output lengths in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-29768

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A memory leak was discovered in the acrn dev ioctl function. The issue was introduced in version v5.12 and is fixed in Linux Kernel version v5.16.19. Recommendations For Linux Kernel versions...

PT-2022-29449

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A memory leak was discovered in the acrn dev ioctl function. The issue was introduced in version v5.12 and is fixed in Linux Kernel version v5.17.2. Recommendations For Linux Kernel versions...

PT-2022-30686

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30478

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed ...

PT-2022-30403

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to preventing bad output lengths in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30399

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists due to a NULL pointer dereference in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-30599

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30470

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.189 Description The issue is related to a potential Spectre v1 gadget in the dm ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30026

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30186

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential security issue exists due to a NULL pointer dereference in the smb2 ioctl query info function. The actual impact and attack plausibility have not yet been proven. Recommendations...