GSD-2022-1002616 drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()

drm/amdgpu: Off by one in dmdmuboutbox1lowirq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002607 fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages

fs-writeback: writebacksbinodes：Recalculate 'wrote' according skipped pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002590 bpf, arm64: Clear prog->jited_len along prog->jited

bpf, arm64: Clear prog-jitedlen along prog-jited This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002587 net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules

net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002586 ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock

ocfs2: dlmfs: fix error handling of userdlmdestroylock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002583 tcp: use alloc_large_system_hash() to allocate table_perturb

tcp: use alloclargesystemhash to allocate tableperturb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002574 vduse: Fix NULL pointer dereference on sysfs access

vduse: Fix NULL pointer dereference on sysfs access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002566 xprtrdma: treat all calls not a bcall when bc_serv is NULL

xprtrdma: treat all calls not a bcall when bcserv is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002565 dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type

dmaengine: zynqmpdma: In struct zynqmpdmachan fix descsize data type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002560 NFSv4: Don't hold the layoutget locks across multiple RPC calls

NFSv4: Don't hold the layoutget locks across multiple RPC calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002553 drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle()

drivers: staging: rtl8192bs: Fix deadlock in rtwjoinbsseventprehandle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002537 sysrq: do not omit current cpu when showing backtrace of all active CPUs

sysrq: do not omit current cpu when showing backtrace of all active CPUs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

RLSA-2022:5319 Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap buffer overflow CVE-2022-1621 vim: buffer over-read CVE-2022-1629 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...

RLSA-2022:5317 Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write CVE-2022-29824 For more details about the security issues, including the impact, a CVSS score,...

CVE-2013-2180

CVE-2013-2180 is rejected and not used; this candidate has been removed to prevent accidental usage.

Important: Red Hat Security Advisory: RHACS 3.70 security update

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes RHACS. The updated image includes bug and security fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which giv...

SUSE-SU-2022:2189-1 Security update for mariadb

This update for mariadb fixes the following issues: Update to 10.4.25 bsc1199928: - CVE-2021-46669 bsc1199928 - CVE-2022-21427 bsc1199928 - CVE-2022-27376 bsc1198628 - CVE-2022-27377 bsc1198603 - CVE-2022-27378 bsc1198604 - CVE-2022-27379 bsc1198605 - CVE-2022-27380 bsc1198606 - CVE-2022-27381...

Low: Red Hat Security Advisory: httpd:2.4 security update

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

GHSA-W3VW-CCC5-QR8V Use After Free in Context::start_auth_session

Impact This issue only applies to applications starting authorization sessions using an explicit initial nonce. When Context::startauthsession was called with a nonce argument value of Some..., the nonce pointer passed down through FFI to EsysStartAuthSession would be a dangling pointer, left ove...

GHSA-G63H-Q855-VP3Q Configuration API in EdgeXFoundry 2.1.0 and earlier exposes message bus credentials to local unauthenticated users

Impact The /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to be kept in the EdgeX secret store and require authentication to access. This vulnerability bypasses the access controls on message b...