PT-2022-34115 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to the deallocation of EPC memory in the dw pcie ep init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2022-34452 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.292 Description: The issue is related to an overflow when configuring a loop. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34315 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: A potential security issue has been identified in the md-raid10 component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33814 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to the update of the kcb status flag after singlestepping in x86/kprobes. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34179 · Linux · Kvm +1

Name of the Vulnerable Software and Affected Versions: KVM versions prior to v5.10.137 Linux Kernel versions prior to v5.10.137 Description: The issue concerns a snapshot pre-VM-Enter DEBUGCTL for the !nested run pending case in KVM's nVMX. The actual impact and attack plausibility have not yet...

PT-2022-34503 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.291 Description: The issue is related to a potential security vulnerability in the jbd2 module of the Linux Kernel. It involves an assertion failure when the journal is aborted, which could potentially be...

CVE-2022-39211 Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server

Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.0.4. It is recommended that the Nextcloud Enterprise Serve...

CVE-2022-3176

There exists a use-after-free in iouring in the Linux kernel. Signalfdpoll and binderpoll use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the iouring poll doesn't handle POLLFREE. This allows a...

PT-2022-33613 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.19.1 Description: A use-after-free bug was discovered in the smb2 tree disconnect function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33402 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A bug was found in the Linux Kernel, specifically in the bgmac module, which could potentially trigger a security issue due to incorrect bytes complement. The actual impact and likelihood of...

PT-2022-33378 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to the qrtr module in the Linux Kernel, where an MHI channel is started after endpoint creation. The actual impact and attack plausibility have not yet been proven...

PT-2022-33356 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A potential memory leak issue exists when failing to issue CMF WQE. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33615 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.19.1 Description: A memory leak issue was discovered in the smb2 handle negotiate function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33685 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: The issue is related to the removal of WQ MEM RECLAIM from storvsc error wq in the scsi: storvsc component. The actual impact and attack plausibility have not yet been proven...

PT-2022-33255 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19.2 through v5.19.8 Description: A potential security issue exists in the Linux Kernel, specifically related to bpf and cgroup. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-33281 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v5.19.5 Description: The issue is related to missing prototypes in the RISC-V traps. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.14...

PT-2022-33448 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a use-after-free crash in the dm sm register threshold callback function. It was introduced in version v3.10 and fixed in version v5.19.2. The actual impact and attac...

PT-2022-33409 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to the btrfs filesystem in the Linux Kernel, where the reloc control is not unset if a transaction commit fails in the prepare to relocate function. The actual impact an...

PT-2022-33489 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the android: binder, where a pointer to the VMA is saved. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33527 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns a potential security vulnerability in the Linux Kernel, where the previous kernel's ima-kexec-buffer is not properly checked against memory bounds. The actual impact and...