SUSE CVE-2022-48706

In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Do proper cleanup if IFCVF init fails ifcvfmgmtdev leaks memory if it is not freed before returning. Call is made to correct return statement so memory does not leak. ifcvfinithw does not take care of this so it is...

Aquantia AQtion USB Driver Heap Buffer Overflow DoS

The vulnerability of the aqc111rxfixup function in the drivers/net/usb/aqc111.c module of the Aquantia AQtion USB driver for the Linux operating system is related to a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux f2fs Kernel Module Heap Buffer Overflow DoS

The vulnerability of the f2fs file system in Linux operating systems is related to the use of an uninitialized buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

SUSE CVE-2022-42265

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where an integer overflow may lead to information disclosure or data tampering...

Linux kernel Cryptographic Scatterwalk Copychunks Privilege Escalation

The vulnerability of the scatterwalkcopychunks function in the net/tls/tlssw.c module of the Linux kernel’s cryptographic subsystem is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure or increase their privileges...

Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c

...

PT-2022-22286 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to an out-of-bounds array access in the kernel mode layer nvidia.ko of the NVIDIA GPU Display Driver for Linux. This may lead to denial of...

PT-2022-26340 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to an integer overflow in the kernel mode layer nvidia.ko of the NVIDIA GPU Display Driver for Linux, which may lead to denial of service...

PT-2022-26347 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to an integer overflow in the kernel mode layer nvidia.ko of the NVIDIA GPU Display Driver for Linux. This overflow may lead to information...

PT-2022-26338 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to an integer overflow in the kernel mode layer nvidia.ko of the NVIDIA GPU Display Driver for Linux. This overflow may lead to information...

kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure

An out-of-bounds OOB memory access flaw was found in the Qlogic ISCSI module in the Linux kernel's qedidbg family of functions in drivers/scsi/qedi/qedidbg.c. Here a local attacker with a special user privilege account or a root can cause an out-of-bound memory access leading to a system crash or...

Linux AF_IEEE802154 Kernel Heap Buffer Overflow DoS

The vulnerability of the ieee802154create function in the net/ieee802154/socket.c module of the AFIEEE802154 module in the Linux kernel is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability could allow unauthorized access to data integrity...

Linux alsa_seq_dummy_init DoS

The vulnerability of the alsaseqdummyinit implementation in the sound/core/seq/snd-seq-dummy.ko module of the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure by connecting an ALSA sequencer MIDI-through device. Th...

Linux Kernel DoS

The vulnerability of the implementation of the irlircunregister handler in the loaded module drivers/media/rc/ir-lirc-codec.ko of the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure by repeatedly loading and...

Linux kernel driver LIRC DoS

The vulnerability of the loaded module containing the Linux kernel’s drivers/staging/media/lirc/lircimon.ko is related to mutual locking in the implementation of the imonprobe handler. Exploiting this vulnerability allows an attacker to cause a system failure when connecting the SoundGraph iMON...

Debian GNU/Linux Remote Compromise Protected Information

The Linux-modules-2.6.18-6-xen-vserver-amd64 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may result in a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

[SECURITY] Fedora 23 Update: fuse-encfs-1.8.1-1.fc23

EncFS implements an encrypted filesystem in userspace using FUSE. FUSE provides a Linux kernel module which allows virtual filesystems to be writt en in userspace. EncFS encrypts all data and filenames in the filesystem and passes access through to the underlying filesystem. Similar to CFS except...

KCodes NetUSB kernel driver is vulnerable to buffer overflow

Overview KCodes NetUSB is vulnerable to a buffer overflow via the network that may result in a denial of service or code execution. Description KCodes NetUSB is a Linux kernel module that provides USB over IP. It is used to provide USB device sharing on a home user network.CWE-120: Buffer Copy...

Oracle Linux 5 : kvm (ELSA-2012-0149)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0149 advisory. - CVE: CVE-2011-4622 - Resolves: bz770101 CVE-2011-4622 kernel: kvm: pit timer with no irqchip crashes the system rhel-5.8 - CVE: CVE-2012-0029 - Resolves:...

USN-1700-2 : linux-ti-omap4 regression

USN-1700-1 fixed vulnerabilities in the Linux kernel. Due to an unrelated regression inotify/fanotify stopped working after upgrading. This update fixes the problem. We apologize for the inconvenience. Original advisory details: A flaw was discovered in the Linux kernel's handling of script...