PT-2022-35324 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to preventing integer overflow in the dfl feature ioctl set irq function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-35302

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description The issue is related to the RCU Read-Copy Update mechanism in the Linux Kernel, specifically avoiding the triggering of strict-GP irq-work when RCU is idle. The actual impact and attack...

PT-2025-43068

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue relates to a null pointer dereference within the regmap-irq subsystem of the Linux kernel. Specifically, the regmap add irq chip fwnode function was not updated to utilize the...

PT-2022-38068

Уязвимость функции regmap add irq chip fwnode модуля drivers/base/regmap/regmap-irq.c драйвера шинных устройства ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и...

kernel: KVM: NULL pointer dereference in kvm_irq_delivery_to_apic_fast()

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a...

qemu security update

15:4.2.1-21.el7 - qemu-kvm.spec: Fix the qemu-regdump sos report plugin path Mark Kanda Orabug: 34680062 - qmp-regdump: Require python3 on OL8 Mark Kanda Orabug: 34672256 - iotests: Adjust 186.out to account for 'null' node-name Mark Kanda Orabug: 34447388 - block: Set the name of BlockBackend if...

PT-2022-34792 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue is related to the gpiolib in the Linux Kernel, specifically with the handling of lineevent state::irq after IRQ registration. The actual impact and attack plausibility have not ye...

kernel security, bug fix, and enhancement update

5.14.0-70.26.1.0.10.OL9 - lockdown: also lock down previous kgdb use Daniel Thompson Orabug: 34290418 CVE-2022-21499 5.14.0-70.26.10.OL9 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted...

GSD-2022-1006161 media: tw686x: Register the irq at the end of probe

media: tw686x: Register the irq at the end of probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006038 media: tw686x: Register the irq at the end of probe

media: tw686x: Register the irq at the end of probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005777 gadgetfs: ep_io - wait until IRQ finishes

gadgetfs: epio - wait until IRQ finishes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005636 media: tw686x: Register the irq at the end of probe

media: tw686x: Register the irq at the end of probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005483 gadgetfs: ep_io - wait until IRQ finishes

gadgetfs: epio - wait until IRQ finishes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

PT-2022-34366

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.19.256 Description The issue is related to the vboxguest component in the Linux Kernel, where the use of devm for irq is not recommended. The actual impact and attack plausibility have not yet been proven...

PT-2022-33746

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.63 Description The issue is related to the vboxguest component in the Linux Kernel, where the use of devm for irq is not recommended. The actual impact and attack plausibility have not yet been proven...

PT-2022-34473 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.291 Description: The issue is related to the gadgetfs ep io, where it waits until IRQ finishes. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-33741 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to the gadgetfs ep io, where it waits until IRQ finishes. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33867

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description A refcount leak was discovered in the mtk pcie init irq domains function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-34419

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue is related to the registration of an irq at the end of a probe. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.7 and fixed in...

PT-2022-34560

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.326 Description The issue is related to the gadgetfs ep io, where it waits until IRQ finishes. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...