Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-022 (ALASKERNEL-5.10-2022-022)

The version of kernel installed on the remote host is prior to 5.10.149-133.644. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-022 advisory. A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function...

CVE-2022-2977 affecting package kernel for versions less than 5.15.70.1-1

CVE-2022-2977 affecting package kernel for versions less than 5.15.70.1-1. A patched version of the package is available...

AZL-11137 CVE-2022-41674 affecting package kernel for versions less than 5.15.74.1-3

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

GSD-2022-1006536 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

gpiolib: cdev: Set lineeventstate::irq after IRQ register successfully This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1006475 netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()

netfilter: nftables: fix nftcountersenabled underflow at nftablesaddchain This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

CVE-2022-2153 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-2153 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2022-3028 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-3028 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2022-2153 affecting package kernel 5.10.134.1-2

CVE-2022-2153 affecting package kernel 5.10.134.1-2. A patched version of the package is available...

GSD-2022-1006336 nvme-tcp: fix UAF when detecting digest errors

nvme-tcp: fix UAF when detecting digest errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...

GSD-2022-1006331 swiotlb: avoid potential left shift overflow

swiotlb: avoid potential left shift overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...

GSD-2022-1006310 ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h

ext4: add EXT4INODEHASXATTRSPACE macro in xattr.h This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006216 clk: qcom: ipq8074: dont disable gcc_sleep_clk_src

clk: qcom: ipq8074: dont disable gccsleepclksrc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006194 loop: Check for overflow while configuring loop

loop: Check for overflow while configuring loop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.292 by commit...

GSD-2022-1006127 tee: add overflow check in register_shm_helper()

tee: add overflow check in registershmhelper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006034 drm/msm/mdp5: Fix global state lock backoff

drm/msm/mdp5: Fix global state lock backoff This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005961 um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups

um: add "noreboot" command line option for PANICTIMEOUT=-1 setups This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005802 can: j1939: j1939_session_destroy(): fix memory leak of skbs

can: j1939: j1939sessiondestroy: fix memory leak of skbs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005727 net/af_packet: check len when min_header_len equals to 0

net/afpacket: check len when minheaderlen equals to 0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005676 md-raid: destroy the bitmap after destroying the thread

md-raid: destroy the bitmap after destroying the thread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005608 mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset

mtd: parsers: ofpart: Fix refcount leak in bcm4908partitionsfwoffset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...