GSD-2022-1006645 drm/msm/a6xx: Replace kcalloc() with kvzalloc()

drm/msm/a6xx: Replace kcalloc with kvzalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

PT-2022-34909 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: A potential issue exists where removing a non-standard SDIO card could cause a kernel panic. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-35727 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.264 Description: The issue is related to the xhci component, specifically concerning the removal of device endpoints from the bandwidth list when freeing the device. The actual impact and attack plausibili...

PT-2022-35474 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A potential issue exists in the libahci platform module, related to a sanity check of the DT child nodes number. The actual impact and attack plausibility have not yet been proven...

PT-2022-35300 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to a shift-out-of-bounds problem in the intel rapl component of the powercap module. The actual impact and potential for attack have not been confirmed. Recommendations...

PT-2022-35387 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue concerns incorrect handling of iterate dir in ksmbd. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-35264 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A potential issue exists in the libahci platform module, related to a sanity check of the DT child nodes number. The actual impact and attack plausibility have not yet been proven...

PT-2022-35137 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A null pointer dereference issue was discovered in the ext4 write info function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35538 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to refcount leak bugs in the drm/omap dss component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-35348 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to a debugfs leak in the mvpp2 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.75,...

PT-2022-35571 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue concerns the drm/virtio component, specifically the handling of transferred 2D BO Buffer Object that is shmem. The actual impact and potential for attack have not been fully...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-022 (ALASKERNEL-5.10-2022-022)

The version of kernel installed on the remote host is prior to 5.10.149-133.644. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-022 advisory. A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function...

CVE-2022-2977 affecting package kernel for versions less than 5.15.70.1-1

CVE-2022-2977 affecting package kernel for versions less than 5.15.70.1-1. A patched version of the package is available...

AZL-11137 CVE-2022-41674 affecting package kernel for versions less than 5.15.74.1-3

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

GSD-2022-1006536 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

gpiolib: cdev: Set lineeventstate::irq after IRQ register successfully This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1006475 netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()

netfilter: nftables: fix nftcountersenabled underflow at nftablesaddchain This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

CVE-2022-2153 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-2153 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2022-3028 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-3028 affecting package kernel for versions less than 5.15.67.1-4. A patched version of the package is available...

CVE-2022-2153 affecting package kernel 5.10.134.1-2

CVE-2022-2153 affecting package kernel 5.10.134.1-2. A patched version of the package is available...

GSD-2022-1006336 nvme-tcp: fix UAF when detecting digest errors

nvme-tcp: fix UAF when detecting digest errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...