EUVD-2022-37449

Malicious code in bioql PyPI...

rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.

...

GSD-2022-1002630 blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx

blk-mq: don't touch -tagset in blkmqgetsqhctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002628 rtc: mt6397: check return value after calling platform_get_resource()

rtc: mt6397: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002621 net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()

net: ethernet: mtkethsoc: out of bounds read in mtkhwlrogetfdirentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002601 amt: fix possible null-ptr-deref in amt_rcv()

amt: fix possible null-ptr-deref in amtrcv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002550 extcon: Modify extcon device to be created after driver data is set

extcon: Modify extcon device to be created after driver data is set This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002531 ceph: fix possible deadlock when holding Fwb to get inline_data

ceph: fix possible deadlock when holding Fwb to get inlinedata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002530 nbd: call genl_unregister_family() first in nbd_cleanup()

nbd: call genlunregisterfamily first in nbdcleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

CVE-2022-34494

rpmsgvirtioaddctrldev in drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel before 5.18.4 has a double free...

PT-2022-3254 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.4 Description: The issue is related to a double free in the rpmsg probe function in the Linux kernel. This could potentially allow an attacker to cause a denial of service. Recommendations: For Linux kernel...

PT-2022-7361 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.4 Description: An issue was discovered in the Linux kernel on powerpc 32-bit platforms, where there is a buffer overflow in ptrace PEEKUSER and POKEUSER when accessing floating point registers. This issue i...