GSD-2022-1003734 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

Malicious Package

Overview perf-benchmarks is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

MAL-2022-5278 Malicious code in perf-benchmarks-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776b6ef381784498b8b7f8ab12eea08d62b43ed272efcd4046efcdcf4bff712d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-benchmarks-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776b6ef381784498b8b7f8ab12eea08d62b43ed272efcd4046efcdcf4bff712d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nf-falcor-device-perf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 875e0d6c4e1161bdf00bac7e372d3ce31d5d4e416acdadd8120986d516bfb233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4836 Malicious code in nf-falcor-device-perf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 875e0d6c4e1161bdf00bac7e372d3ce31d5d4e416acdadd8120986d516bfb233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-perf-measure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476e2d289f8d884842c959d7088338d3aec3ce688bcef6532f6ca377960a9d8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-keyvault-certificates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9003463e95619d4e40f5507d682e1e9f6c51dfe0d607c8397e22babb820bd8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5276 Malicious code in perf-ai-text-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f1f588c99277332d2d7ec961811565a2954f8ef2e6d10eda59d3b0940b09eae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5286 Malicious code in perf-keyvault-certificates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9003463e95619d4e40f5507d682e1e9f6c51dfe0d607c8397e22babb820bd8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-ai-text-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f1f588c99277332d2d7ec961811565a2954f8ef2e6d10eda59d3b0940b09eae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-keyvault-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ba3ff274677edafd94d8d2a447ff201db5d546d8ae4a87e38723189c151d6a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dbafd7f735f6fa5bec3af236673c8d99293ed8731c9e57fe12120420d23582f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5287 Malicious code in perf-keyvault-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ba3ff274677edafd94d8d2a447ff201db5d546d8ae4a87e38723189c151d6a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5281 Malicious code in perf-data-tables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dbafd7f735f6fa5bec3af236673c8d99293ed8731c9e57fe12120420d23582f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...