PT-2022-29055

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.22 through v5.15.26 Description A potential issue exists in the snd soc put volsw function, where shift tested values are not properly handled. The actual impact and attack plausibility have not yet been proven...

PT-2022-29197

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.270 Description A potential security issue exists in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.270, updat...

PT-2022-29228

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description A potential security issue exists in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.9.304, update ...

PT-2022-29221

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29157

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29198

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.270 Description A potential issue exists in the snd soc put volsw function, where shift tested values are not properly handled. The actual impact and attack plausibility have not yet been proven...

PT-2022-29217

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.305 Description A potential issue exists in the snd soc put volsw function, where shift tested values are not properly handled. The actual impact and attack plausibility have not yet been proven...

PT-2022-29045

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.27 Description A potential issue exists in the Linux Kernel's UDP GRO frag list handling, which may have security implications. The actual impact and attack plausibility have not yet been proven...

PT-2022-29094

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description A potential security issue exists in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.26, update ...

GLSA-202202-03 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202202-03 Mozilla Firefox: Multiple vulnerabilities - A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. This bug could only be triggered when accessibility was...

LiquidityPool:getAmountToTransfer() has incorrect calculation due to incorrect bracket placement

Lines of code Vulnerability details Impact In the scenario where the transfer fee exceeds the equilibrium fee, the excess gets credited to the incentive pool. The incentive pool fee added is incentivePooltokenAddress = incentivePooltokenAddress + amount transferFeePerc -...

CVE-2022-23039

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2022-23037

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2022-23037

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2022-23039

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2022-23042

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

Microsoft addressed three zero-day vulnerabilities March 2022 Patch Tuesday Update

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Microsoft addressed 71 the following vulnerabilities in their March 2022 Patch Tuesday Update. This advisory briefs about six vulnerabilities out of which three of them have been rated critical in severity and three of them ar...

Denial of service

Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service...

GSD-2022-1000683 moxart: fix potential use-after-free on remove path

moxart: fix potential use-after-free on remove path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.9 by commit...

GSD-2022-1000681 perf/x86/intel/pt: Fix crash with stop filters in single-range mode

perf/x86/intel/pt: Fix crash with stop filters in single-range mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...