PT-2022-34410 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: A refcount leak was discovered in the ap flash init function. The issue was introduced in version v4.7 and is fixed in Linux Kernel version v4.19.256. The actual impact and attack...

PT-2022-34180 · Linux · Kvm +1

Name of the Vulnerable Software and Affected Versions: KVM versions prior to v5.10.137 Linux Kernel versions 4.19 through 5.10.136 Description: The issue concerns a snapshot pre-VM-Enter BNDCFGS for the !nested run pending case in KVM's nVMX. The actual impact and attack plausibility have not yet...

PT-2022-33935 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.62 Description: A heap-based overflow issue exists in the set ntacl dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34391 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It involves checking the size of the screen before performing a memset io operation in the vt8623fb driver. The...

PT-2022-33836 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.18 through 5.15.60 Description: A refcount leak was discovered in the mt6797 mt6351 dev probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.1...

CVE-2022-35982 Segfault in `SparseBincount` in TensorFlow

TensorFlow is an open source platform for machine learning. If SparseBincount is given inputs for indices, values, and denseshape that do not make a valid sparse tensor, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

MGASA-2022-0336 Updated wireshark packages fix security vulnerability

F5 Ethernet Trailer dissector infinite loop wnpa-sec-2022-06...

SUSE-SU-2022:3287-1 Security update for python-rsa

This update for python-rsa fixes the following issues: - CVE-2020-13757: Fixed an issue where leading null bytes in a ciphertext would be ignored during decryption, leading to a potential information leak bsc1172389...

PT-2022-33411 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.3 Description: The issue is related to the btrfs raid56 functionality, specifically in the raid56 parity recover function, where cached sectors are not trusted. The actual impact and attack plausibility ha...

PT-2022-33396 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.3 Description: The issue is related to the cxl hdm decode init function calling convention. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2022-33464 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a refcount leak in setup msi msg address. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33461 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a potential panic in the dl cpu busy function due to an empty cs-cpus allowed. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2022-33629 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.19.2 Description: A potential security issue exists in the KVM x86/mmu component, related to the treatment of NX as a valid SPTE bit for NPT. The actual impact and attack plausibility have not yet been proven...

PT-2022-33441 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the handling of IBSS in channel switch in the cfg80211 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33455 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a crash due to stale SRB access around I/O timeouts. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33472 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.16 through v5.19.1 Description: A refcount leak bug was found in the graph get type function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.16 and fixed in...

PT-2022-22815 · National Instruments · Ni System Configuration Manager

Name of the Vulnerable Software and Affected Versions: NI System Configuration Manager versions prior to 22.5 Description: The issue is related to improper input validation, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations: For...

PT-2022-33476 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.35 through 5.19.1 Description: The issue is related to a deadlock and link starvation in the outgoing data path of the n gsm component in the Linux Kernel. The actual impact and attack plausibility have not yet been...

PT-2022-33460 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a fix in the qcom-geni-serial component of the Linux Kernel, where a change from %lu to %u in print statements was made. The actual impact and potential for attack ha...

PT-2022-33394 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.3 Description: The issue is related to a potential leak of cookie access references in the fscache module if invalidation is in progress or has failed. The actual impact and attack plausibility have n...