CVE-2023-3141

CVE-2023-3141 : A use-after-free in the Linux kernel memstick driver (drivers/memstick/host/r592.c, function r592_remove) can crash the system on device disconnect and may lead to kernel information leaks. Affected tracked advisories confirm this issue across multiple vendor/distro kernels (e.g.,...

CVE-2023-3141

A use-after-free flaw was found in r592remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak...

SUSE CVE-2022-0487

A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1...

GSD-2022-1006247 memstick/ms_block: Fix a memory leak

memstick/msblock: Fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit efd675246aec045507b9425c67b548cc2d782d8f...

GSD-2022-1006146 memstick/ms_block: Fix a memory leak

memstick/msblock: Fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit 37958980eb4cd71ae594ace093c11b6a91e165e8...

GSD-2022-1006016 memstick/ms_block: Fix a memory leak

memstick/msblock: Fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit 9d8b911fe3c3ed788c66edba7c90e32a4a7a5f53,...

GSD-2022-1005852 memstick/ms_block: Fix a memory leak

memstick/msblock: Fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit 9260a154b3b5e387dbceec7c0ac441470646bc6f...

GSD-2022-1005596 memstick/ms_block: Fix a memory leak

memstick/msblock: Fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit 961d7d12080fe70847f944d656e36cd0dd0214ba,...

GSD-2022-1005246 memstick/ms_block: Fix a memory leak

memstick/msblock: Fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit 39be95d1ff7b44c1e969af72ba9da7332dfcc1da, ...

EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2022-2181)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9478)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-9478 advisory. - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34207044 CVE-2022-1729 - debug: Lock down kgdb Stephen Brennan Orabug: 34207043...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1779)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GSD-2022-1001483 memstick/mspro_block: fix handling of read-only devices

memstick/msproblock: fix handling of read-only devices This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

openSUSE 15 Security Update : kernel (openSUSE-SU-2022:1037-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:1037-1 advisory. The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...

OESA-2022-1534 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This fla...

A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.

...

Linux kernel buffer overflow vulnerability (CNVD-2022-13357)

Linux kernel is the kernel used by the Linux Foundation's open-source operating system, Linux.KVM is one of the kernel-based virtual machines. Linux kernel suffers from a buffer overflow vulnerability that stems from a use-after-free vulnerability found in rtsxusbmsdrvremove in...

CVE-2022-0487

A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1...

DEBIAN-CVE-2022-0487

A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1...

UBUNTU-CVE-2022-0487

A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1...