CVE-2023-23559
- EPSS 0.03%
- Veröffentlicht 13.01.2023 01:15:10
- Zuletzt bearbeitet 05.05.2025 16:15:30
In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
CVE-2022-3628
- EPSS 0.07%
- Veröffentlicht 12.01.2023 19:15:24
- Zuletzt bearbeitet 08.04.2025 15:15:45
A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges.
CVE-2023-23455
- EPSS 0.03%
- Veröffentlicht 12.01.2023 07:15:09
- Zuletzt bearbeitet 20.03.2025 21:15:18
atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification resu...
CVE-2022-4662
- EPSS 0.01%
- Veröffentlicht 22.12.2022 22:15:16
- Zuletzt bearbeitet 09.04.2025 19:15:46
A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.
CVE-2022-20566
- EPSS 0.02%
- Veröffentlicht 16.12.2022 16:15:19
- Zuletzt bearbeitet 21.04.2025 14:15:26
In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: And...
CVE-2022-20572
- EPSS 0.01%
- Veröffentlicht 16.12.2022 16:15:19
- Zuletzt bearbeitet 18.04.2025 15:15:46
In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ...
CVE-2022-3111
- EPSS 0.02%
- Veröffentlicht 14.12.2022 21:15:12
- Zuletzt bearbeitet 22.04.2025 14:15:19
An issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power/supply/wm8350_power.c lacks free of WM8350_IRQ_CHG_FAST_RDY, which is registered in wm8350_init_charger().
CVE-2022-3643
- EPSS 0.17%
- Veröffentlicht 07.12.2022 01:15:11
- Zuletzt bearbeitet 21.11.2024 07:19:56
Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption i...
CVE-2022-42328
- EPSS 0.03%
- Veröffentlicht 07.12.2022 01:15:11
- Zuletzt bearbeitet 23.04.2025 15:15:51
Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in ...
CVE-2022-42329
- EPSS 0.04%
- Veröffentlicht 07.12.2022 01:15:11
- Zuletzt bearbeitet 23.04.2025 15:15:51
Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in ...