126 matches found
GSD-2022-1006485 ice: Fix crash by keep old cfg when update TCs more than queues
ice: Fix crash by keep old cfg when update TCs more than queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006483 mm/slab_common: fix possible double free of kmem_cache
mm/slabcommon: fix possible double free of kmemcache This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006481 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
ipvlan: Fix out-of-bound bugs caused by unset skb-macheader This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006479 sfc: fix null pointer dereference in efx_hard_start_xmit
sfc: fix null pointer dereference in efxhardstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006478 sfc/siena: fix null pointer dereference in efx_hard_start_xmit
sfc/siena: fix null pointer dereference in efxhardstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006471 net/smc: Stop the CLC flow if no link to map buffers on
net/smc: Stop the CLC flow if no link to map buffers on This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006468 bnxt: prevent skb UAF after handing over to PTP worker
bnxt: prevent skb UAF after handing over to PTP worker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006467 cgroup: cgroup_get_from_id() must check the looked-up kn is a directory
cgroup: cgroupgetfromid must check the looked-up kn is a directory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006464 drm/gma500: Fix BUG: sleeping function called from invalid context errors
drm/gma500: Fix BUG: sleeping function called from invalid context errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006463 drm/gma500: Fix WARN_ON(lock->magic != lock) error
drm/gma500: Fix WARNONlock-magic != lock error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006459 ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
ext4: fix bug in extents parsing when ehentries == 0 and ehdepth 0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
PT-2022-34715 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: A bug exists in the extents parsing of the ext4 file system when eh entries equals 0 and eh depth is greater than 0. The actual impact and potential for attack have not been proven yet...
PT-2022-34746 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue concerns the slub component in the Linux Kernel, specifically with the flush cpu slab and free slab functions being invoked in a task context. The actual impact and potential for...
PT-2022-34721 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the s390/dasd component. It is caused by an Oops in dasd alias get start dev due to a missing...
CVE-2022-31324
An arbitrary file download vulnerability in the downloadAction function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request...
CVE-2022-31322
The CVE-2022-31322 entry affects Penta Security Systems’ WAPPLES, specifically version 6.0 r3 with 4.10-hotfix1. The vulnerability allows privilege escalation by overwriting files using SUID-enabled executables. Root cause and affected component: SUID flagged executables enabling local privilege ...
CVE-2022-31324
An arbitrary file download vulnerability in the downloadAction function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request...
PT-2022-6143 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions v6.0-rc1 through v6.0-rc3 Description: A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in the nvmet setup auth function, allows an attacker to perform a Pre-Auth Denial of Service DoS...
