PT-2022-34042 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: The issue is related to an overflow implicit truncation warning in the irqchip/tegra component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-34429 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue is related to a missing platform device put in the hisi lpc acpi probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34577 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue is related to a null dereference in the nf tables component of the netfilter framework. This problem was introduced in version v3.16 and is fixed in version v4.9.326. The actual...

PT-2022-33876 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A reference count leak occurs on route deletion failure in the netdevsim fib. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

CVE-2022-39210 Access to internal files of the Nextcloud Android app

Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud Android app files are not properly protected. As a result access to internal files of the from within the Nextcloud Android app is possible. This may lead to a leak of sensitiv...

CVE-2022-3176 Use-after-free in io_uring in Linux Kernel

There exists a use-after-free in iouring in the Linux kernel. Signalfdpoll and binderpoll use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the iouring poll doesn't handle POLLFREE. This allows a...

PT-2022-33443 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A race condition exists when reusing xattr blocks in the ext4 file system. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-33583 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A boundary check issue in the put entry function has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33366 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a use-after-free condition in the cdns3 USB driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-33517 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the KVM in the Linux Kernel, where the Accessed/Dirty bits are not set for the ZERO PAGE. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-33519 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A refcount leak was discovered in the ohci hcd nxp probe function. The issue was introduced in version v3.5 and is fixed in Linux Kernel version v5.19.2. Recommendations: For Linux Kernel...

PT-2022-33261 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.8 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It was introduced in version v5.17 and fixed in version v5.19.8. The actual impact and attack plausibility have not...

PT-2022-33227 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.8 Description: The issue concerns an array out of bounds access in the gpio-fan component of the Linux Kernel. This problem was introduced in version v4.1 and is fixed in version v5.19.8. The actual impact...

PT-2022-33585 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the Linux Kernel's handling of device probing when resuming from hibernation. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-33702 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: The issue concerns a data-race around sysctl fb tunnels only for init net. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-33469 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.1 Description: A memory leak issue was discovered in the sp5100 tco watchdog of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33635 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A potential security issue exists in the Linux Kernel related to the Xen timer and IRQ handling. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-33468 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.17 through v5.19.1 Description: A refcount leak bug was discovered in the Linux Kernel, specifically in the fbdev: amba-clcd component. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-33544 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.1 Description: A memory leak issue was discovered in the kunit executor. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.19 and is fixed in...

PT-2022-33217 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.8 Description: The issue concerns the media: mceusb component in the Linux Kernel. It involves the use of new usb control msg routines. The actual impact and attack plausibility have not yet been proven...