Linux kernel code vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in the Linux kernel that stems from a null pointer dereference and reuse-after-release vulnerability in net/ax25/ax25timer.c. The vulnerabilit...

PT-2022-10422 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a possible out of bound write due to improper validation of the number of timer values received from firmware while syncing timers. This affects various...

CVE-2021-35103: Out-of-bounds Write

Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and...

PT-2025-8077

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the rxrpc call struct timer. The timer can be started from packet input routines running in softirq mode with only the RCU read...

Qualcomm chip buffer error vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. A security vulnerability exists in a number of Qualcomm products...

GSD-2022-1000610 KVM: LAPIC: Also cancel preemption timer during SET_LAPIC

KVM: LAPIC: Also cancel preemption timer during SETLAPIC This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

PT-2022-28913

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.6 Description The issue is related to the net/mlx5 driver in the Linux Kernel. It involves the use of del timer sync in the firmware reset flow of halting poll. The actual impact and attack plausibility hav...

PT-2022-28884

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.5 Description The issue concerns the KVM LAPIC, where the preemption timer is not properly canceled during SET LAPIC. This could potentially lead to security vulnerabilities, although the actual impact and...

GSD-2022-1000247 KVM: LAPIC: Also cancel preemption timer during SET_LAPIC

KVM: LAPIC: Also cancel preemption timer during SETLAPIC This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...

PT-2022-28550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.20 Description The issue is related to the net/mlx5 driver in the Linux Kernel. It involves the use of del timer sync in the firmware reset flow of halting poll. The actual impact and attack plausibility ha...

PT-2022-28525

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.19 Description The issue concerns the KVM LAPIC, where the preemption timer is not properly canceled during SET LAPIC. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-7500 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.0 Description: The issue is related to a crash in the Linux kernel's BPF Berkeley Packet Filter component when both bpf spin lock and bpf timer are present in a BPF map value. The copy map value function do...

AlmaLinux 8 : kernel (ALSA-2021:4647)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4647 advisory. - A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. Thi...

PT-2022-7516

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc1+ 5 Description The issue is related to the Kernel-based Virtual Machine KVM component in the Linux kernel. It can be triggered by not exposing tsc-deadline mode and doing a reboot in the guest system...

NTP time sync issue on VPX running on VMware platform

For Citrix ADC VPX instances deployed on VMware ESXi hypervisor, the Citrix ADC system time might go out of sync and consequently network time protocol NTP synchronization is lost. This problem occurs due to an issue with VMware ACPI timer emulation. tail -f ntpd.log 6 Dec 01:06:23 ntpd42663:...

PT-2022-28344

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 5.15.12 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6....

PT-2022-28321

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.170 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28312

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.224 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28304

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 4.9.295 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6....

PT-2022-28300

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.298 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.27 and is...