RHSA-2022:7933 — Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Release	Package	Fixed in
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-core	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-debug	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-debug-core	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-debug-debuginfo	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-debug-devel	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-debug-kvm	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-debug-modules	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-debug-modules-extra	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-debuginfo	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-debuginfo-common-x86_64	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-devel	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-kvm	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-modules	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::nfv	kernel-rt-modules-extra	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-core	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-debug	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-debug-core	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-debug-debuginfo	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-debug-devel	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-debug-modules	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-debug-modules-extra	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-debuginfo	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-debuginfo-common-x86_64	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-devel	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-modules	0:5.14.0-162.6.1.rt21.168.el9_1
Red Hat · RHEL 9 enterprise_linux:9::realtime	kernel-rt-modules-extra	0:5.14.0-162.6.1.rt21.168.el9_1

Vulnerabilities 50

Medium 5.3

CVE-2022-2586 Exploited Public exploit EPSS 10%

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-…

The Linux Kernel Organization linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Jan 8, 2024
KEV Jun 26, 2024
High 8.8

CVE-2022-48785

ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() Some time ago 8965779d2c0e ("ipv6,mcast: always hold idev->lock before mca_lock") switched ipv6_get_lladdr() to __ipv6_get_lladdr(), whi…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Jul 16, 2024
High 8.2

CVE-2023-2008 Public exploit

Kernel: udmabuf: improper validation of array index leading to local privilege escalation

A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escal…

Linux Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux

Apr 14, 2023
High 7.8

CVE-2021-47099

veth: ensure skb entering GRO are not cloned.

In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b ("veth: allow enabling NAPI even without XDP"), if GRO is enabled on a veth device and TSO is disabled on the peer devi…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Mar 4, 2024
High 7.8

CVE-2022-29581 Public exploit

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege …

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

May 17, 2022
High 7.5

CVE-2022-36946 Public exploit

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jul 27, 2022
High 7.1

CVE-2021-47580

scsi: scsi_debug: Fix type in min_t to avoid stack OOB

In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix type in min_t to avoid stack OOB Change min_t() to use type "u32" instead of type "int" to avoid stack out of bounds. With min_t() type "int" the values get sign extende…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Jun 19, 2024
Medium 6.9

CVE-2022-2503

Linux Kernel LoadPin bypass via dm-verity table reload

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the …

Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Aug 12, 2022
Medium 6.7

CVE-2022-20572

In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission c…

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Dec 16, 2022
Medium 6.7

CVE-2022-21499

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker w…

Oracle Oracle Linux Oracle VM linux-raspi2 Linux Debian Ubuntu

Jun 9, 2022
Medium 5.6

CVE-2022-29901

Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary…

Intel Intel Microprocessors linux-raspi2 linux-hwe Debian Ubuntu

Jul 12, 2022
Medium 5.5

CVE-2022-21123

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potenti…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine

Jun 15, 2022
Medium 5.5

CVE-2022-21125

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to po…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine

Jun 15, 2022
Medium 5.5

CVE-2022-21166

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticate…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine

Jun 15, 2022
Medium 5.5

CVE-2022-26373

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 18, 2022
Medium 5.5

CVE-2022-3107

An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Dec 14, 2022
Medium 5.5

CVE-2022-3108

An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kf…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Dec 14, 2022
Medium 5.5

CVE-2023-1095

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction …

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux

Feb 28, 2023
Medium 5.1

CVE-2022-42432

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kern…

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

Mar 29, 2023
Medium 4.7

CVE-2022-28693

Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized …

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

Feb 14, 2025
Unscored —

CVE-2020-36516

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Feb 26, 2022
Unscored —

CVE-2021-3640

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 3, 2022
Unscored —

CVE-2021-47556

ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()

In the Linux kernel, the following vulnerability has been resolved: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() ethtool_set_coalesce() now uses both the .get_coalesce() and .set_coalesce() callbacks. But the check for their availability…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

May 24, 2024
Unscored —

CVE-2022-0168

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Aug 26, 2022
Unscored —

CVE-2022-0617

A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers ud…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Feb 16, 2022
Unscored —

CVE-2022-0854

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw al…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 23, 2022
Unscored —

CVE-2022-1016

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Aug 29, 2022
Unscored —

CVE-2022-1048

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PC…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Apr 29, 2022
Unscored —

CVE-2022-1158

A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get th…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Aug 5, 2022
Unscored —

CVE-2022-1184

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. Th…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 29, 2022
Unscored —

CVE-2022-1263

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allo…

linux-raspi2 linux-hwe linux-azure linux-riscv Virtualization Debian Ubuntu Azure Linux

Aug 31, 2022
Unscored —

CVE-2022-1280

A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 13, 2022
Unscored —

CVE-2022-1353

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a lo…

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Apr 29, 2022
Unscored —

CVE-2022-1679 Public exploit

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 16, 2022
Unscored —

CVE-2022-1852

A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in th…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jun 30, 2022
Unscored —

CVE-2022-1998

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_reco…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jun 9, 2022
Unscored —

CVE-2022-20368

Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel

linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu

Aug 11, 2022
Unscored —

CVE-2022-2153

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbe…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Aug 31, 2022
Unscored —

CVE-2022-23816 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

linux-hwe linux-azure linux-riscv linux-gcp Ubuntu Alpine

Jan 21, 2022
Unscored —

CVE-2022-23825

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…

AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jul 14, 2022
Unscored —

CVE-2022-24448

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag,…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Feb 4, 2022
Unscored —

CVE-2022-2639 Public exploit

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, whi…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 1, 2022
Unscored —

CVE-2022-28390

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Apr 3, 2022
Unscored —

CVE-2022-28893

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the i…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Apr 11, 2022
Unscored —

CVE-2022-29900 Public exploit

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…

AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jul 12, 2022
Unscored —

CVE-2022-3239

A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 19, 2022
Unscored —

CVE-2022-39190

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occ…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Sep 2, 2022
Unscored —

CVE-2022-48905

ibmvnic: free reset-work-item when flushing

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: free reset-work-item when flushing Fix a tiny memory leak when flushing the reset work queue.

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Aug 22, 2024
Unscored —

CVE-2022-48918

iwlwifi: mvm: check debugfs_dir ptr before use

In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: check debugfs_dir ptr before use When "debugfs=off" is used on the kernel command line, iwiwifi's mvm module uses an invalid/unchecked debugfs_dir pointer and causes a BUG: BUG:…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Aug 22, 2024
Unscored —

CVE-2022-48936 Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

Aug 22, 2024

References

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
article
https://access.redhat.com/solutions/6971358
report
https://bugzilla.redhat.com/show_bug.cgi?id=1980646
report
https://bugzilla.redhat.com/show_bug.cgi?id=2037386
report
https://bugzilla.redhat.com/show_bug.cgi?id=2051444
report
https://bugzilla.redhat.com/show_bug.cgi?id=2052312
report
https://bugzilla.redhat.com/show_bug.cgi?id=2053632
report
https://bugzilla.redhat.com/show_bug.cgi?id=2058395
report
https://bugzilla.redhat.com/show_bug.cgi?id=2059928
report
https://bugzilla.redhat.com/show_bug.cgi?id=2066614
report
https://bugzilla.redhat.com/show_bug.cgi?id=2066706
report
https://bugzilla.redhat.com/show_bug.cgi?id=2066819
report
https://bugzilla.redhat.com/show_bug.cgi?id=2070205
report
https://bugzilla.redhat.com/show_bug.cgi?id=2071022
report
https://bugzilla.redhat.com/show_bug.cgi?id=2073064
report
https://bugzilla.redhat.com/show_bug.cgi?id=2074208
report
https://bugzilla.redhat.com/show_bug.cgi?id=2084125
report
https://bugzilla.redhat.com/show_bug.cgi?id=2084183
report
https://bugzilla.redhat.com/show_bug.cgi?id=2084479
report
https://bugzilla.redhat.com/show_bug.cgi?id=2088021
report
https://bugzilla.redhat.com/show_bug.cgi?id=2089815
report
https://bugzilla.redhat.com/show_bug.cgi?id=2090226
report
https://bugzilla.redhat.com/show_bug.cgi?id=2090237
report
https://bugzilla.redhat.com/show_bug.cgi?id=2090240
report
https://bugzilla.redhat.com/show_bug.cgi?id=2090241
report
https://bugzilla.redhat.com/show_bug.cgi?id=2103148
report
https://bugzilla.redhat.com/show_bug.cgi?id=2103153
report
https://bugzilla.redhat.com/show_bug.cgi?id=2114878
report
https://bugzilla.redhat.com/show_bug.cgi?id=2115065
report
https://bugzilla.redhat.com/show_bug.cgi?id=2115278
report
https://bugzilla.redhat.com/show_bug.cgi?id=2123695
report
https://bugzilla.redhat.com/show_bug.cgi?id=2129152
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7933.json
report
https://access.redhat.com/security/cve/CVE-2020-36516
advisory
https://www.cve.org/CVERecord?id=CVE-2020-36516
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-36516
article
https://www.spinics.net/lists/netdev/msg795642.html
report
https://access.redhat.com/security/cve/CVE-2021-3640

Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 28

Vulnerabilities 50

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-…

ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()

Kernel: udmabuf: improper validation of array index leading to local privilege escalation

veth: ensure skb entering GRO are not cloned.

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege …

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a …

scsi: scsi_debug: Fix type in min_t to avoid stack OOB

Linux Kernel LoadPin bypass via dm-verity table reload

In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission c…

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker w…

Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potenti…

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to po…

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticate…

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…

An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv…

An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kf…

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction …

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kern…

Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized …

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID …

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls …

ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c…

A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers ud…

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw al…

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. …

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PC…

A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get th…

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. Th…

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allo…

A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a …

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a lo…

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9…

A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in th…

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_reco…

Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbe…

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag,…

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, whi…

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the i…

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…

A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for …

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occ…

ibmvnic: free reset-work-item when flushing

iwlwifi: mvm: check debugfs_dir ptr before use

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

References