graphics processor driver Privilege Escalation

The vulnerability of the kbasejduserbufpinpages function malikbasemem.c in the graphics processor driver for Android devices from Google Pixel devices is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

SUSE-SU-2022:2838-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release bsc1201727: - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave INTEL-SA-00657. See also:...

CVE-2022-26373

CVE-2022-26373 concerns Intel processors where non-transparent sharing of return-predictor targets between contexts may allow an authorized local user to disclose information. The provided documents describe this issue as a local-information-disclosure risk but do not specify a vendor patch/versi...

SUSE-SU-2022:2833-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release bsc1201727: - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave INTEL-SA-00657. See also:...

PT-2022-6092

Name of the Vulnerable Software and Affected Versions Arm Mali GPU kernel driver versions Bifrost r0p0 through r39p0 Arm Mali GPU kernel driver versions Valhall r19p0 through r39p0 Arm Mali GPU kernel driver versions Midgard r4p0 through r32p0 Description The issue is related to the mishandling o...

AMD Processor Execution Unit Scheduler Contention Side-Channel Vulnerability - Lenovo Support US

No description provided...

UBUNTU-CVE-2022-21233

Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

HPESBHF04342 rev.1 - Certain HPE ProLiant DL/ML Servers Using Certain Intel Processors, INTEL-SA-00657, 2022.2 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to 1.6007-14-2022 HPE ProLiant DL110 Gen10 Plus Telco server - Prior to 1.6207-14-2022 HPE ProLiant DL360 Gen10 Plus server - Pri...

HPESBHF04347 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00657, 2022.2 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 Plus server - Prior to 1.6207-14-2022 - Use BIOS family U46 HPE ProLiant DX380 Gen10 Plus server - Prior to 1.6207-14-2022 - Use BIOS family U46 CVS...

com.dslplatform:dsl-clc (>=1.6.2, <=1.7.2), com.dslplatform:dsl-json-processor (>=0.8, <=1.2) +1 more potentially affected by CVE-2022-31197 via org.postgresql:postgresql (9.4.1208.jre6)

org.postgresql:postgresql MAVEN version 9.4.1208.jre6 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.dslplatform:dsl-clc =1.6.2, =0.8, =0.7, =0.9 Source cves: CVE-2022-31197 Source advisory:...

com.dslplatform:dsl-clc (>=1.8.3, <=1.9.0), com.dslplatform:dsl-json-processor (>=1.4.1, <=1.4.6) +1 more potentially affected by CVE-2022-31197 via org.postgresql:postgresql (9.4.1212.jre6)

org.postgresql:postgresql MAVEN version 9.4.1212.jre6 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.dslplatform:dsl-clc =1.8.3, =1.4.1, =1.1.0, =1.2.0 Source cves: CVE-2022-31197 Source advisory:...

com.dslplatform:dsl-clc (>=1.8.0, <=1.8.2), com.dslplatform:dsl-json-processor (>=1.3, <=1.4) +1 more potentially affected by CVE-2022-31197 via org.postgresql:postgresql (9.4.1209.jre6)

org.postgresql:postgresql MAVEN version 9.4.1209.jre6 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - com.dslplatform:dsl-clc =1.8.0, =1.3, =1.0, =1.0.1 Source cves: CVE-2022-31197 Source advisory:...

openssl: AES OCB fails to encrypt some bytes

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimized implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption...

mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor...

Intel CPU Information Disclosure Vulnerability (INTEL-SA-00330)

The Intel CPU on the remote host might be prone to an information disclosure vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

CVE-2022-26427

In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07085540; Issue ID: ALPS07085540...

CVE-2022-26426

In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07085486; Issue ID: ALPS07085486...

CVE-2022-21792

In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07085410; Issue ID: ALPS07085410...