PT-2022-34230 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: A potential issue exists due to a data race. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.3 and is fixed in Linux Kernel versi...

CVE-2022-35964 Segfault in `BlockLSTMGradV2` in TensorFlow

TensorFlow is an open source platform for machine learning. The implementation of BlockLSTMGradV2 does not fully validate its inputs. This results in a a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

PT-2022-33701 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: The issue concerns a data-race around sysctl devconf inherit init net. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-33381 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a potential crash on an unused port in the mv88e6060 driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior t...

PT-2022-33486 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v5.19.1 Description: A refcount leak was discovered in the cros ec codec platform probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-33356 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A potential memory leak issue exists when failing to issue CMF WQE. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33497 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the introduction of clear highpage kasan tagged in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33509 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v5.19.1 Description: The issue is related to the addition of multithread support for a DMA channel in the sf-pdma driver. It was introduced in version v5.5 and fixed in version v5.19.2. The actual impact and...

PT-2022-33494 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a potential NULL dereference in the xhci plat remove function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33528 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a refcount leak in the ap flash init function. It was introduced in version v4.7 and fixed in version v5.19.2. The actual impact and attack plausibility have not yet...

PT-2022-33508 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the soundwire driver bind/unbind and callbacks. It was introduced in version v4.16 and fixed in Linux Kernel version v5.19.2. The actual impact and attack plausibility hav...

PT-2022-33463 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A refcount leak was discovered in the spufs init isolated loader function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For versions pri...

PT-2022-23451 · Bolt Cms · Bolt Cms

Name of the Vulnerable Software and Affected Versions: Bolt CMS versions 5.1.12 and below Description: The issue allows an authenticated user with the ROLE EDITOR privileges to upload and rename a malicious file, achieving remote code execution. Recommendations: For versions 5.1.12 and below,...

PT-2022-33345 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to the creation of duplicate mapping tables for FMRs in the RDMA/rxe module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-33533 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.3 through v5.19.1 Description: The issue concerns the calculation of ICOSQ size in the net/mlx5e driver, specifically when accounting for XSK RQ UMRs. This problem was introduced in version v5.3 and fixed in version...

PT-2022-33522 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A refcount leak was discovered in the bcm4908 partitions fw offset function of the Linux Kernel. The issue was introduced in version v5.13 and is fixed in version v5.19.2. The actual impact...

PT-2022-33514 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.1 through v5.19.1 Description: A potential deadlock issue exists in the driver attach function of the driver core. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33625 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.1 Description: The issue concerns a counter restart during overflow for RV32 in RISC-V. It was introduced in version v5.18 and fixed in version v5.19.2. The actual impact and attack plausibility have...

PT-2022-33373 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.19.3 Description: A buffer overflow issue exists in the sja1105 setup devlink regions function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2022-33304 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: A data-race issue exists around sysctl tstamp allow data. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.0 and is fixed in Linux...