GSD-2022-1006999 mm: hugetlb: fix UAF in hugetlb_handle_userfault

mm: hugetlb: fix UAF in hugetlbhandleuserfault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006946 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed

net: fix UAF issue in nfqnlnfhookdrop when opsinit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006934 fs: fix UAF/GPF bug in nilfs_mdt_destroy

fs: fix UAF/GPF bug in nilfsmdtdestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.1 by commit 2a96b532098284ecf8e4849b8b9e5fc7a28bdee9...

GSD-2022-1006713 mm: hugetlb: fix UAF in hugetlb_handle_userfault

mm: hugetlb: fix UAF in hugetlbhandleuserfault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006689 ip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed

ip6mr: fix UAF issue in ip6mrskdone when addrconfinitnet failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

GSD-2022-1006629 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed

net: fix UAF issue in nfqnlnfhookdrop when opsinit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

Google addressed several flaws with Chrome 107

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Google Chrome addresses multiple vulnerabilities in its latest stable channel update for Windows, Mac, and Linux.The Use-After-Free UAF issue is responsible for four of the six Chrome...

CVE-2022-44550

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44547

The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability...

Design/Logic Flaw

The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability...

Code injection

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44550

CVE-2022-44550 affects Huawei/HarmonyOS: a use-after-free in the graphics display module when traversing graphic layers. The underlying issue is a memory reuse-after-release condition that can lead to availability impact. Public details in the provided documents identify the vulnerability and its...

CVE-2022-44550

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44547

The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability...

CVE-2022-44547

CVE-2022-44547 affects the Display Service module (HarmonyOS). The issue is a use-after-free (UAF) in the Display Service, causing potential availability impact. Multiple sources (NVD, Red Hat, PT Security, CVE list, and related enrichments) confirm the vulnerability and its impact on availabilit...

CVE-2022-44547

The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability...

CVE-2022-44550

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...

WebKit HTMLSelectElement Use-After-Free Exploit

WebKit use-after-free in HTMLSelectElement There is a use-after-free in HTMLSelectElement. If the length of the HTMLSelectElement is set to a value greater than the existing options length then dummy HTMLOptionElements elements are created. These HTMLOptionsElements are stored as raw pointers in...

CVE-2022-3658

CVE-2022-3658 affects Google Chrome on Chrome OS, specifically the Feedback service. Description: Use-after-free in Feedback service can lead to heap corruption when a user installs a malicious extension via UI interaction. Impact: potential arbitrary code execution or system compromise as noted ...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5691-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5691-1 advisory. David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a...