CVE-2022-34470

Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

Mozilla: Use-after-free in nsSHistory

The Mozilla Foundation Security Advisory describes this flaw as: Session history navigations may have led to a use-after-free and potentially exploitable crash...

Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11

The Mozilla Foundation Security Advisory describes this flaw as: The Mozilla Fuzzing Team reporting potential vulnerabilities present in Firefox 101 and Firefox ESR 91.10. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of these could have bee...

Malicious code in rhynocallbackpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bee8048e72c9679df98896285ceae25c5f6a747569f659b6aa8aeaace5237ee7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GSD-2022-1004085 ipw2x00: Fix potential NULL dereference in libipw_xmit()

ipw2x00: Fix potential NULL dereference in libipwxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004082 ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004079 regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt

regulator: pfuze100: Fix refcount leak in pfuzeparseregulatorsdt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004065 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004044 net: altera: Fix refcount leak in altera_tse_mdio_create

net: altera: Fix refcount leak in alteratsemdiocreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004041 net: xfrm: unexport __init-annotated xfrm4_protocol_init()

net: xfrm: unexport init-annotated xfrm4protocolinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004034 drivers: tty: serial: Fix deadlock in sa1100_set_termios()

drivers: tty: serial: Fix deadlock in sa1100settermios This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004033 USB: host: isp116x: check return value after calling platform_get_resource()

USB: host: isp116x: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004024 netfilter: nf_tables: disallow non-stateful expression in sets earlier

netfilter: nftables: disallow non-stateful expression in sets earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1004017 ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1004008 dm stats: add cond_resched when looping over entries

dm stats: add condresched when looping over entries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.282 by commit...

GSD-2022-1004007 rxrpc: Fix listen() setting the bar too high for the prealloc rings

rxrpc: Fix listen setting the bar too high for the prealloc rings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003999 ipw2x00: Fix potential NULL dereference in libipw_xmit()

ipw2x00: Fix potential NULL dereference in libipwxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003987 um: Fix out-of-bounds read in LDT setup

um: Fix out-of-bounds read in LDT setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003985 ARM: versatile: Add missing of_node_put in dcscb_init

ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003964 ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe

ata: pataocteoncf: Fix refcount leak in octeoncfprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...