PT-2022-33858 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue concerns the soundwire driver bind/unbind and callbacks. It was introduced in version v4.16 and fixed in Linux Kernel version v5.15.61. The actual impact and attack plausibility...

PT-2022-34051 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: The issue is related to error handling in the adminq component. It was introduced in version v3.14 and fixed in version v5.10.138. The actual impact and attack plausibility have not yet be...

PT-2022-33959 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.60 Description: A potential security issue exists in the Linux Kernel, specifically in the arm64/poly1305 module, where a read out-of-bounds condition may occur. The actual impact and attack plausibility...

PT-2022-34148 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: A refcount leak was discovered in the qmp cooling devices register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33905 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A refcount leak was discovered in the qmp cooling devices register function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux...

PT-2022-34435 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: A refcount leak was discovered in the meson mx socinfo init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-33848 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A potential memory leak was identified in the qedr alloc mr function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

CVE-2022-35964 Segfault in `BlockLSTMGradV2` in TensorFlow

TensorFlow is an open source platform for machine learning. The implementation of BlockLSTMGradV2 does not fully validate its inputs. This results in a a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

PT-2022-33356 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A potential memory leak issue exists when failing to issue CMF WQE. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33486 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v5.19.1 Description: A refcount leak was discovered in the cros ec codec platform probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-33625 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.1 Description: The issue concerns a counter restart during overflow for RV32 in RISC-V. It was introduced in version v5.18 and fixed in version v5.19.2. The actual impact and attack plausibility have...

PT-2022-33701 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: The issue concerns a data-race around sysctl devconf inherit init net. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-33508 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the soundwire driver bind/unbind and callbacks. It was introduced in version v4.16 and fixed in Linux Kernel version v5.19.2. The actual impact and attack plausibility hav...

PT-2022-33463 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A refcount leak was discovered in the spufs init isolated loader function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For versions pri...

PT-2022-33522 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A refcount leak was discovered in the bcm4908 partitions fw offset function of the Linux Kernel. The issue was introduced in version v5.13 and is fixed in version v5.19.2. The actual impact...

PT-2022-33381 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a potential crash on an unused port in the mv88e6060 driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior t...

PT-2022-23451 · Bolt Cms · Bolt Cms

Name of the Vulnerable Software and Affected Versions: Bolt CMS versions 5.1.12 and below Description: The issue allows an authenticated user with the ROLE EDITOR privileges to upload and rename a malicious file, achieving remote code execution. Recommendations: For versions 5.1.12 and below,...

PT-2022-33494 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a potential NULL dereference in the xhci plat remove function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33345 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to the creation of duplicate mapping tables for FMRs in the RDMA/rxe module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-33509 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v5.19.1 Description: The issue is related to the addition of multithread support for a DMA channel in the sf-pdma driver. It was introduced in version v5.5 and fixed in version v5.19.2. The actual impact and...