Most recent entries from all

bdu:2022-03921

certfr-2022-avi-1125 — De multiples vulnérabilités ont été corrigées dans le noyau Linux de SUSE. Elles permettent…

certfr-2022-avi-1125

EUVD-2026-17300

fkie_cve-2022-32296

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.

GHSA-h4g2-8vrh-w26q

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used.

gsd-2022-32296

ICSA-23-075-01 — Siemens SCALANCE, RUGGEDCOM Third-Party

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071, CVE-2019-1073. A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine. A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem. LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given. An out-of-bounds hea…

msrc_CVE-2022-32296 — The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occ…

msrc_CVE-2022-32296

OESA-2022-1725 — kernel security update

Affected: openEuler:20.03-LTS-SP1: kernel, openEuler:20.03-LTS-SP3: kernel, openEuler:22.03-LTS: kernel

The Linux Kernel, the operating system core itself. Security Fix(es):

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel(CVE-2022-20132) In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174846563References: Upstream kernel(CVE-2022-20154)

A use-after-free vulnerability was found in the Linux kernel s Netfilter subsystem in net/netfilter/nf_tables_api.c. This flaw allows a local attacker with user access to cause a privilege escalation issue.(CVE-2022-1966)

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used.(CVE-2022-32296)

An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in ptrace PEEKUSER and POKEUSER (aka PEEKUSR and POKEUSR) when accessing floating point registers. (CVE-2022-32981)

net/netfilter/nf_tables_api.c in the Linux kernel through 5.…

RHSA-2026:4128 — Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)

giflib: out-of-bounds read in DumpScreen2RGB() in gif2rgb.c in gif2rgb tool golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service kernel: insufficient TCP source port randomness leads to client identification libvpx: Heap buffer overflow related to VP9 encoding openjpeg: Malicious files can cause the program to enter a large loop openjpeg: Resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints libsndfile: Reachable assertion in mpeg_l3_encoder_close pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image

SUSE-SU-2022:3693-1 — Security update for the Linux Kernel

Security update for the Linux Kernel

UBUNTU-CVE-2022-32296

Affected: Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:16.04:LTS: linux and 117 more

WID-SEC-W-2022-0299 — Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen

Ein entfernter Angreifer kann eine Schwachstelle in Linux Kernel ausnutzen, um Informationen offenzulegen.