ubuntucve

CVE-2022-36879

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped...

2022-07-27T00:00:00

ubuntucve

io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We...

2022-07-22T00:00:00

ubuntucve

CVE-2020-36558

A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection...

2022-07-21T00:00:00

ubuntucve

CVE-2020-36557

A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a...

2022-07-21T00:00:00

ubuntucve

CVE-2022-21505

Kernel lockdown bypass when UEFI secure boot is disabled / unavailable and IMA appraisal is enabled. Notes Author| Note ---|--- amurray | This only allows to bypass kernel lockdown when secure boot is disabled - affects upstream kernels since...

2022-07-19T00:00:00

ubuntucve

CVE-2021-33655

When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of...

2022-07-18T00:00:00

ubuntucve

CVE-2021-33656

When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of...

2022-07-18T00:00:00

ubuntucve

CVE-2022-23816

[Unknown...

2022-07-13T00:00:00

ubuntucve

CVE-2022-23825

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information...

2.1 CVSS

2022-07-12T00:00:00

ubuntucve

CVE-2022-29900

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions. Notes Author| Note ---|--- sbeattie | RetBleed on AMD Zen 1 and Zen 2...

2.1 CVSS

2022-07-12T00:00:00

ubuntucve

CVE-2022-29901

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under...

1.9 CVSS

2022-07-12T00:00:00

ubuntucve

CVE-2022-2380

The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerability could result in local attackers being able to crash the...

2022-07-12T00:00:00

ubuntucve

CVE-2022-28693

Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. Alternative form of return branch target prediction in some Intel(R) Processors may allow an authorized user to...

2022-07-12T00:00:00

ubuntucve

CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any...

4.9 CVSS

2022-07-06T00:00:00

ubuntucve

CVE-2022-33740

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365,...

3.6 CVSS

2022-07-05T00:00:00

ubuntucve

CVE-2022-26365

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365,...

3.6 CVSS

2022-07-05T00:00:00

ubuntucve

CVE-2022-33741

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365,...

3.6 CVSS

2022-07-05T00:00:00

ubuntucve

CVE-2022-33744

Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged...

1.9 CVSS

2022-07-05T00:00:00

ubuntucve

CVE-2022-33742

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365,...

3.6 CVSS

2022-07-05T00:00:00

ubuntucve

CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path), a code label was moved in a way allowing for SKBs having references (pointers) retained for further processing to nevertheless be...

4.6 CVSS

2022-07-05T00:00:00

affectedPackage.packageName:"linux-gke-5.3"

CVE-2022-36879

CVE-2022-2327

CVE-2020-36558

CVE-2020-36557

CVE-2022-21505

CVE-2021-33655

CVE-2021-33656

CVE-2022-23816

CVE-2022-23825

CVE-2022-29900

CVE-2022-29901

CVE-2022-2380

CVE-2022-28693

CVE-2022-2318

CVE-2022-33740

CVE-2022-26365

CVE-2022-33741

CVE-2022-33744

CVE-2022-33742

CVE-2022-33743