CVE-2022-49688

The CVE-2022-49688 entry concerns the Linux kernel afs subsystem. A patch fix for afs_getattr prevents dereferencing vnode->volume when the dynamic root afs superblock has pseudo-inodes without a volume or server, which previously could trigger a NULL pointer dereference when stat’ing a direct...

CVE-2022-50004

CVE-2022-50004 is a Linux kernel vulnerability in the xfrm policy path. A null pointer dereference can occur when transmitting an skb with metadata_dst where dst->dev is NULL, through the xfrm interface, due to a missing null check in xfrmi_xmit/xfrm_lookup_with_ifid. The impact is kernel cras...