PT-2022-35187 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.2 Description: A potential issue exists where there is a leak of nilfs root in the event of a writer thread creation failure. The actual impact and likelihood of an attack have not been confirmed...

PT-2022-35932

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description A bug has been identified in the nilfs mdt destroy function, potentially leading to a use-after-free UAF or general protection fault GPF issue. The actual impact and attack plausibility have...

PT-2022-35800 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A leak of nilfs root occurs in case of writer thread creation failure. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-35930

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description A use-after-free bug was discovered in the struct nilfs root of the nilfs2 file system. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-35931

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description A NULL pointer dereference issue exists at the nilfs bmap lookup at level function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-35933

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description A potential issue exists where there is a leak of nilfs root in the event of a writer thread creation failure. The actual impact and likelihood of an attack have not been confirmed...

PT-2022-35870

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.296 Description A use-after-free bug was discovered in the struct nilfs root of the nilfs2 file system. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-35591

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.10.147 Description A leak of nilfs root occurs in case of writer thread creation failure. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6....

PT-2022-35589

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.148 Description A NULL pointer dereference issue exists at the nilfs bmap lookup at level function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-35590

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.148 Description A use-after-free bug was discovered in the struct nilfs root of the nilfs2 file system. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-35710

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.218 Description A bug has been identified in the nilfs mdt destroy function, potentially leading to use-after-free UAF or general protection fault GPF issues. The actual impact and attack plausibility have n...

PT-2022-35417

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.74 Description The issue concerns a leak of nilfs root in the event of a writer thread creation failure. This problem was introduced in version v2.6.37 and is fixed in Linux Kernel version v5.15.74. The...

PT-2022-35709 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.218 Description: The issue is related to a leak of nilfs root in the event of a writer thread creation failure. The actual impact and potential for attack have not been fully determined. Recommendations: Fo...

PT-2022-35798 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A use-after-free bug was discovered in the struct nilfs root of the nilfs2 file system. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2022-35189 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.1 Description: A bug has been identified in the nilfs mdt destroy function, potentially leading to a use-after-free UAF or general protection fault GPF issue. The actual impact and attack plausibility have...

PT-2022-35873 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: A potential issue exists where there is a leak of nilfs root in the event of a writer thread creation failure. The actual impact and likelihood of an attack have not been confirmed...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-038 (ALASKERNEL-5.4-2022-038)

The version of kernel installed on the remote host is prior to 5.4.219-126.410. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-038 advisory. A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-022 (ALASKERNEL-5.10-2022-022)

The version of kernel installed on the remote host is prior to 5.10.149-133.644. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-022 advisory. A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function...

Important: kernel

Issue Overview: A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root host user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization SEV. CVE-2022-0171 A...

CVE-2022-3649

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfsnewinode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch t...