Security Bulletin: Linux Kernel vulnerability may affect IBM Elastic Storage System (CVE-2021-3759)

Summary There is a vulnerability in the Linux kernel, used by IBM Elastic Storage System, which could allow a denial of service. Vulnerability Details CVEID:CVE-2021-3759 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a memory overflow in the ipc function in the memcg...

PT-2022-36051 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v6.0.8 Description: A memory leak issue was discovered in the ipc wwan dellink function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.14...

PT-2022-36207 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.79 Description: A memory leak issue was discovered in the ipc wwan dellink function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-36037 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: A memory leak issue was discovered in the ipc pcie read bios cfg function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2022-36197 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.79 Description: A memory leak issue was discovered in the ipc pcie read bios cfg function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2024-11829 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the ipc mux init function. When the allocation of ipc mux-ul adb.pp qlt fails, the ipc mux is not properly...

@cerebroapp/cerebro-basic-apps (>=1.0.0-alpha.0, <=1.0.0-alpha.1), @finsemble/finsemble-core (>=1.0.0-beta-3, <=8.0.2) +11 more potentially affected by CVE-2022-4135 via electron (>=19.0.0, <=19.0.17)

electron NPM version =19.0.0, =1.0.0-alpha.0, =1.0.0-beta-3, =1.0.0-beta-3, =3.0.9, =0.36.0-canary.17, =0.0.32, =2.0.74, =2.0.90 - simple-git-gui 3.8.31 Source cves: CVE-2022-4135 Source advisory: OSV:GHSA-995F-9X5R-2RCJ...

kernel: ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytes

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-topology: Prevent double freeing of ipccontroldata via loadbytes We have sanity checks for byte controls and if any of the fail the locally allocated scontrol-ipccontroldata is freed up, but not set to NULL. On a...

GSD-2022-1006794 ipc: mqueue: fix possible memory leak in init_mqueue_fs()

ipc: mqueue: fix possible memory leak in initmqueuefs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

kernel: ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytes

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-topology: Prevent double freeing of ipccontroldata via loadbytes We have sanity checks for byte controls and if any of the fail the locally allocated scontrol-ipccontroldata is freed up, but not set to NULL. On a...

The vulnerability of the “Export logs” function (Settings\Logging\Export logs) of the Fortinet FortiClient security device allows a hacker to increase their privileges.

The vulnerability of the “Export logs” function Settings\Logging\Export logs of the Fortinet FortiClient security device for Linux is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a attacker to increase their privilege...

CVE-2022-33217

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile...

Memory corruption

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile...

CVE-2022-33217

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile...

CVE-2022-33217

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile...

PT-2022-21749 · Qualcomm · Qualcomm Ipc

Name of the Vulnerable Software and Affected Versions: Qualcomm IPC in Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in Qualcomm IPC due to a buffer copy without checking the size of the input while starting communication with a compromis...

CVE-2022-33217

CVE-2022-33217 : Memory corruption in Qualcomm IPC within Snapdragon Mobile due to a buffer copy that fails to validate input size when initiating communication with a compromised kernel. The issue targets Qualcomm IPC kernel components and can enable local exploitation with low privileges, carry...

CVE-2022-33217: Buffer Copy without Checking Size of Input

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile...

GSD-2022-1005077 ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot

ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

PT-2022-33336

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.19.4 Description The issue is related to the ASoC SOF Intel cnl component, where IPC replies are processed before firmware boot. The actual impact and attack plausibility have not yet been proven. Recommendatio...