CVE-2022-42464 Kernel memory pool override in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in furth ...

OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have a Kernel memory pool override vulnerability in /dev/mmzuserdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel...

PT-2022-33686 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.61 through v5.15.63 Description: The issue is related to missing mmap lock calls in the binder alloc function when using the VMA. The actual impact and attack plausibility have not yet been proven. Recommendations:...

CVE-2022-0175

A flaw was found in the VirGL virtual OpenGL renderer virglrenderer. The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading t...

Ubuntu: Security Advisory (USN-3933-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-32806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 5.10.133 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-33174

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.325 Description The issue is related to a data race between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-33047

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v4.19.253 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.1...

PT-2022-33119

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.290 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-32624

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v5.15.57 Description The issue is related to a data race between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32948

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v5.4.207 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-32402

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v5.18.14 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

Integer overflow

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it...

Integer overflow

DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gstmatroskadecompressdata function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS...

CVE-2022-1922

DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gstmatroskadecompressdata function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS...

CVE-2022-1923

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it...

CVE-2022-1924

DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it...

CVE-2022-1924

DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it...

CVE-2022-1923

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it...

CVE-2022-1923

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it...

CVE-2022-1923

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it...