GHSA-69CH-W2M2-3VJP vulnerabilities

Vulnerabilities for packages: hey, grpcurl, dynamic-localpv-provisioner, php-fpmexporter, k3d, terraform-provider-sendgrid, kubeflow, gitleaks, vt-cli...

CVE-2022-32149 vulnerabilities

Vulnerabilities for packages: hey, grpcurl, dynamic-localpv-provisioner, php-fpmexporter, k3d, terraform-provider-sendgrid, kubeflow, gitleaks, vt-cli...

GSD-2022-1006184 tty: vt: initialize unicode screen buffer

tty: vt: initialize unicode screen buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006064 tty: vt: initialize unicode screen buffer

tty: vt: initialize unicode screen buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005996 iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)

iommu/vt-d: avoid invalid memory access via nodeonlineNUMANONODE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005820 iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)

iommu/vt-d: avoid invalid memory access via nodeonlineNUMANONODE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005685 tty: vt: initialize unicode screen buffer

tty: vt: initialize unicode screen buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005553 iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)

iommu/vt-d: avoid invalid memory access via nodeonlineNUMANONODE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-34254 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to invalid memory access via node onlineNUMA NO NODE in iommu/vt-d. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

GSD-2022-1005191 iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)

iommu/vt-d: avoid invalid memory access via nodeonlineNUMANONODE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

RLSA-2022:6460 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-21125 Incomplete cleanup in specific special regist...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

ALSA-2022:6003 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: information leak in scsiioctl CVE-2022-0494 use-after-free in tcnewtfilter in net/sched/clsapi.c CVE-2022-1055 For more details about the security issues, including the impact, a CVSS score,...

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: information leak in scsiioctl CVE-2022-0494 use-after-free in tcnewtfilter in net/sched/clsapi.c CVE-2022-1055 For more details about the security issues, including the impact, a CVSS score,...

The vulnerability in the implementation of the VT_DISALLOCATE function in Linux kernel allows a attacker to trigger a service failure.

The vulnerability in the implementation of the VTDISALLOCATE function in Linux operating systems is related to the use of memory after it is freed during the loading of the tty utility. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

DEBIAN-CVE-2020-36558

A race condition in the Linux kernel before 5.5.7 involving VTRESIZEX could lead to a NULL pointer dereference and general protection fault...

UBUNTU-CVE-2020-36557

A race condition in the Linux kernel before 5.6.2 between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free...

SUSE-SU-2022:2158-1 Security update for xen

This update for xen fixes the following issues: - CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host bsc1197423. - CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts using VT-d IOMMU hardware, which...

CLSA-2022-1655821334 Fixed 6 CVEs in kernel

net: qrtr: fix another OOB Read in qrtrendpointpost CVE-2021-3743 - vt: keyboard: avoid signed integer overflow in kascii CVE-2020-13974 - pNFS/flexfiles: fix incorrect size check in decodenfsfh CVE-2021-4157 - esp: Fix possible buffer overflow in ESP transformation CVE-2022-27666 - sock: remove...

MAL-2022-6986 Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1085597e357b5b1d2b12ab109ff9c279fa1cbca538e418cf962f34265384141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...