The vulnerabilities of the functions module_gzip_decompress() and module_xz_decompress() in the kernel/module/decompress.c module of the Linux operating system’s kernel module loading subsystem allow a hacker to cause a service failure.

The vulnerability of the functions modulegzipdecompress and modulexzdecompress in the kernel/module/decompress.c module of the Linux operating system’s kernel module loading subsystem is related to improper checking of error values for pointers. Exploiting this vulnerability could allow an attack...

PT-2022-6412

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.2 Description The issue is related to the misinterpretation of the module get next page return value in the kernel/module/decompress.c file, which expects NULL in the error case but actually receives an error...