GSD-2022-1006665 iio: temperature: ltc2983: allocate iio channels once

iio: temperature: ltc2983: allocate iio channels once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

GSD-2022-1006664 fs/binfmt_elf: Fix memory leak in load_elf_binary()

fs/binfmtelf: Fix memory leak in loadelfbinary This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

GSD-2022-1006661 drm/msm: fix use-after-free on probe deferral

drm/msm: fix use-after-free on probe deferral This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

GSD-2022-1006657 drm/msm/dp: fix aux-bus EP lifetime

drm/msm/dp: fix aux-bus EP lifetime This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit 8768663188e4169333f66583e4d2432e65c421df, i...

GSD-2022-1006653 mm/kmemleak: prevent soft lockup in kmemleak_scan()'s object iteration loops

mm/kmemleak: prevent soft lockup in kmemleakscan's object iteration loops This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

GSD-2022-1006616 net: do not sense pfmemalloc status in skb_append_pagefrags()

net: do not sense pfmemalloc status in skbappendpagefrags This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

PT-2022-35461

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.152 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically with the ahci module. The actual impact and attack plausibility have not yet been proven...

PT-2022-35563

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description A potential issue exists in the jbd2 component of the Linux Kernel, related to the fc do one pass function. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-34964

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.3 Description The issue concerns a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-35483

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven...

PT-2022-35358

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the hci ldisc,serdev component. The actual impact and attack plausibility have not yet been...

PT-2022-34967

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.3 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically with hwmon. The actual impact and attack plausibility have not yet been proven. Recommendations For...

CVE-2022-40735

The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "appropriately short exponents" can be used when there are adequate subgroup constraints, and these sho...

PT-2022-35011

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.3 Description The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-35491 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A potential memory leak was identified in the nouveau bo alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-35320

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description A potential security issue has been identified in the Linux Kernel, related to the md/raid5 module. The issue concerns the removal of an unnecessary bio put in the raid5 read one chunk...

PT-2022-35924

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description A potential security issue has been identified in the Linux Kernel, related to the cpuinfo component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-35414

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.74 Description A potential security issue exists in the wifi cfg80211/mac80211 component, where bad MBSSID elements are not properly rejected. The actual impact and attack plausibility of this issue have no...

No Allowlist For Bridgeable ERC-20 Tokens

Lines of code Vulnerability details Vulnerability Details We noticed that the deposit function of the L1ERC20Bridge contract code snippet 1 permits a user to bridge any ERC-20 tokens including deflationary and rebase tokens from the L1 to the L2 network. We considered that permitting non-standard...

Intel 2022.3 IPU - BIOS November 2022 Security Update

Intel has informed HP of potential security vulnerabilities in the BIOS firmware for some Intel® Processors which may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilitie...