[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2022-1793 --- kernel

ID: oval:org.secpod.oval:def:1700909Date: (C)2022-05-10   (M)2024-04-25
Class: PATCHFamily: unix




A use-after-free flaw was found in the Linux kernel's FUSE filesystem in the way a user triggers write. This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation. A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information. A NULL pointer dereference flaw was found in the Linux kernel's X.25 set of standardized network protocols functionality in the way a user terminates their session using a simulated Ethernet card and continued usage of this connection. This flaw allows a local user to crash the system. mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free. A double-free flaw was found in the Linux kernel in the ems_usb_start_xmit function. This flaw allows an attacker to create a memory leak and corrupt the underlying data structure by calling free more than once

Platform:
Amazon Linux 2
Product:
kernel
perf
python-perf
Reference:
ALAS2-2022-1793
CVE-2022-1011
CVE-2022-1353
CVE-2022-1516
CVE-2022-28389
CVE-2022-28390
CVE-2023-1637
CVE-2022-41858
CVE    7
CVE-2022-1011
CVE-2022-28389
CVE-2022-28390
CVE-2023-1637
...
CPE    4
cpe:/a:python-perf:python-perf
cpe:/o:linux:linux_kernel
cpe:/a:perf:perf
cpe:/o:amazon:linux:2
...

© SecPod Technologies