GSD-2022-1003122 drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected

drm/msm/mdp5: Return error code in mdp5piperelease when deadlock is detected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002877 pipe: Fix missing lock in pipe_resize_ring()

pipe: Fix missing lock in piperesizering This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

PT-2022-32173

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the mdp5 pipe release function in the Linux Kernel, where a deadlock detection does not return an error code. This problem was introduced in version v4.18 and is fixe...

PT-2022-31923

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.120 Description The issue is related to a missing lock in the pipe resize ring function. This problem was introduced in version v5.8 and is fixed in Linux Kernel version v5.10.120. The actual impact and...

PT-2022-32057

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the mdp5 pipe release function in the Linux Kernel, where a deadlock detection does not return an error code. This was introduced in version v4.18 and fixed in version...

PT-2022-31672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to the mdp5 pipe release function in the Linux Kernel, where a deadlock detection does not return an error code. This was introduced in version v4.18 and fixed in version...

PT-2022-31722

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.45 Description The issue concerns a missing lock in the pipe resize ring function. This problem was introduced in version v5.8 and is fixed in Linux Kernel version v5.15.45. The actual impact and attack...

PT-2022-31886

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to the mdp5 pipe release function in the Linux Kernel, where a deadlock detection does not return an error code. This problem was introduced in version v4.18 and is fixe...

PT-2022-31385

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the mdp5 pipe release function in the Linux Kernel, where a deadlock detection does not return an error code. This was introduced in version v4.18 and fixed in version...

PT-2022-31039

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the mdp5 pipe release function in the Linux Kernel, where a deadlock detection does not return an error code. This problem was introduced in version v4.18 and is fixed ...

PT-2022-31453

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description A missing lock in the pipe resize ring function may potentially lead to security issues. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31140

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.18.1 Description The issue is related to a missing lock in the pipe resize ring function. This problem was introduced in version v5.8 and is fixed in Linux Kernel version v5.18.2. The actual impact and...

CVE-2022-23171

AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low privileges to send a malicious payload and gain SYSTEM permissions on a windows computer where the AtlasVPN client is installed...

CVE-2022-23171

AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low privileges to send a malicious payload and gain SYSTEM permissions on a windows computer where the AtlasVPN client is installed...

CLSA-2022-1655822512 Fixed 6 CVEs in kernel

net: qrtr: fix another OOB Read in qrtrendpointpost CVE-2021-3743 - vt: keyboard: avoid signed integer overflow in kascii CVE-2020-13974 - pNFS/flexfiles: fix incorrect size check in decodenfsfh CVE-2021-4157 - esp: Fix possible buffer overflow in ESP transformation CVE-2022-27666 - sock: remove...

AtlasVPN 安全漏洞

AtlasVPN is a free VPN application from AtlasVPN, Inc. A security vulnerability exists in versions prior to AtlasVPN 2.42, which stems from a lack of proper security controls over named pipe messages, and is exploited by an attacker to gain privileges on a Windows computer with the AtlasVPN clien...

CVE-2022-23171: Undefined Security Weakness

AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low privileges to send a malicious payload and gain SYSTEM permissions on a windows computer where the AtlasVPN client is installed...

CVE-2022-23171

AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low privileges to send a malicious payload and gain SYSTEM permissions on a windows computer where the AtlasVPN client is installed...

Metasploit Weekly Wrap-Up

vCenter Secret Extracter Expanding on the work of the vcenterforgesamltoken auxiliary module, community contributor npm-cesium137-io has added a new module for extracting the vmdir/vmafd certificates, the IdP keypair, the VMCA root cert, and anything from vmafd that has a private key associated,...

CVE-2022-32230

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death BSOD crash of the Windows kernel. For most...