CVE-2022-24669

Technical details for CVE-2022-24669 are not publicly available in the provided documents. Monitor for updates.

GSD-2022-1006323 ALSA: bcd2000: Fix a UAF bug on the error path of probing

ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006263 PM: hibernate: defer device probing when resuming from hibernation

PM: hibernate: defer device probing when resuming from hibernation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006164 PM: hibernate: defer device probing when resuming from hibernation

PM: hibernate: defer device probing when resuming from hibernation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006042 PM: hibernate: defer device probing when resuming from hibernation

PM: hibernate: defer device probing when resuming from hibernation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005923 ALSA: bcd2000: Fix a UAF bug on the error path of probing

ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005893 PM: hibernate: defer device probing when resuming from hibernation

PM: hibernate: defer device probing when resuming from hibernation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005661 PM: hibernate: defer device probing when resuming from hibernation

PM: hibernate: defer device probing when resuming from hibernation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-34151 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns a potential security vulnerability related to device probing when resuming from hibernation. The actual impact and attack plausibility have not yet been proven...

PT-2022-33919 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue concerns a potential security vulnerability related to device probing when resuming from hibernation. The actual impact and attack plausibility have not yet been proven...

GSD-2022-1005327 PM: hibernate: defer device probing when resuming from hibernation

PM: hibernate: defer device probing when resuming from hibernation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33585 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the Linux Kernel's handling of device probing when resuming from hibernation. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

UBUNTU-CVE-2022-36112

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Usage of RSS feeds or extenal calendar in planning is subject to SSRF exploit. Server-side requests ca...

AZL-10822 CVE-2022-3028 affecting package kernel for versions less than 5.15.67.1-4

A race condition was found in the Linux kernel's IP framework for transforming packets XFRM subsystem when multiple calls to xfrmprobealgs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. A security vulnerability exists in Google Android 13, which stems from a vulnerability in its PackageManager that allows an attacker to use side-channel probing to determine whether an application is installed without...

PT-2022-37514 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue with fwupd involves ignoring non-PCI NVMe devices, such as NVMe-over-Fabrics, when probing. Additionally, the package was rebuilt with a new UEFI secure boot key. Recommendations: A...

[SECURITY] Fedora 36 Update: httprobe-0.1.2-7.fc36

Take a list of domains and probe for working HTTP and HTTPS servers...

CVE-2022-36904

Jenkins Repository Connector Plugin 2.2.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

[SECURITY] Fedora 36 Update: httprobe-0.1.2-6.fc36

Take a list of domains and probe for working HTTP and HTTPS servers...

CVE-2022-0005

Sensitive information accessible by physical probing of JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access...