GSD-2022-1002640 driver: base: fix UAF when driver_attach failed

driver: base: fix UAF when driverattach failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.514.3.el7 - uek-rpm: Update OL7 SecureBoot certificate files Saeed Mirzamohammadi Orabug: 34219958 4.14.35-2047.514.2 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34207044 CVE-2022-1729 - debug: Lock down kgdb Stephen Brennan Orabug: 34207043 CVE-2022-21499...

CVE-2022-1898

CVE-2022-1898 refers to a Use After Free in Vim when handling vim/vim code paths, with the description stating the issue occurs in Vim prior to version 8.2. Connected documents corroborate the vulnerability in Vim and list advisories where Vim was fixed (e.g., Astra Linux bulletin and Cloud Found...

CVE-2022-1795

CVE-2022-1795 affects GPAC (gpac/gpac) prior to version 2.1.0-DEV. Multiple connected advisories describe a memory misreference/Use After Free vulnerability in GPAC, potentially causing a crash and, in some disclosures, arbitrary code execution. Sources consistently identify the issue as originat...

CVE-2022-22252

The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability...

Spoofing

The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability...

CVE-2022-22260

The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability...

Spoofing

The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability...

CVE-2022-22252

CVE-2022-22252 involves Huawei HarmonyOS DFX module and is described as a use-after-free (UAF) vulnerability that can affect system stability. The NVD entry lists a CVSS v3.1 base score of 7.5 (Network vector, low attack complexity, no user interaction, high impact on availability) and notes an i...

CVE-2022-22252

The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability...

CVE-2022-29794

The CVE-2022-29794 entry concerns Huawei/HarmonyOS where a Use-After-Free (UAF) flaw in the frame scheduling module is the root cause. Affected component: HarmonyOS kernel/frame scheduling subsystem. Impact, as stated: data integrity, confidentiality, and availability can be compromised upon expl...

CVE-2022-29794

The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...

CVE-2022-22260

CVE-2022-22260 is a kernel-module use-after-free vulnerability in Huawei/HarmonyOS reported across multiple sources (NVD, RH, CNVD/CNNVD). The issue is exploited via network access with low attack complexity and no authentication, leading to potential data integrity and availability impact (CVSS ...

CVE-2022-22260

The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

HUAWEI HarmonyOS Resource Management Error Vulnerability (CNVD-2022-47652)

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the HUAWEI HarmonyOS kernel that stems from a UAF vulnerability in the frame scheduling module, which...

GSD-2022-1002385 scsi: target: tcmu: Fix possible page UAF

scsi: target: tcmu: Fix possible page UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit...

GSD-2022-1002296 nfc: nci: add flush_workqueue to prevent uaf

nfc: nci: add flushworkqueue to prevent uaf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.239 by commit...

GSD-2022-1002291 scsi: target: tcmu: Fix possible page UAF

scsi: target: tcmu: Fix possible page UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.239 by commit...

GSD-2022-1002203 ax25: fix UAF bug in ax25_send_control()

ax25: fix UAF bug in ax25sendcontrol This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.190 by commit eaa7eb23fa76db45f7da1b6192518705863d0ebe...