CVE-2022-41849
- EPSS 0.32%
- Veröffentlicht 30.09.2022 06:15:12
- Zuletzt bearbeitet 21.11.2024 07:23:56
drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open(), aka a race condition between ufx_ops_open and ufx_usb_di...
CVE-2022-41850
- EPSS 0.21%
- Veröffentlicht 30.09.2022 06:15:12
- Zuletzt bearbeitet 08.10.2026 21:17:49
roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress.
CVE-2022-41218
- EPSS 0.78%
- Veröffentlicht 21.09.2022 07:15:08
- Zuletzt bearbeitet 28.05.2025 16:15:28
In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.
CVE-2022-3239
- EPSS 0.24%
- Veröffentlicht 19.09.2022 20:15:12
- Zuletzt bearbeitet 21.11.2024 07:19:07
A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based TV cards. A local user could use this flaw to crash the system or potentially escalate their privileges on the...
CVE-2022-40768
- EPSS 0.28%
- Veröffentlicht 18.09.2022 05:15:08
- Zuletzt bearbeitet 21.11.2024 07:22:01
drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.
CVE-2022-2977
- EPSS 0.24%
- Veröffentlicht 14.09.2022 21:15:10
- Zuletzt bearbeitet 21.11.2024 07:02:01
A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it ma...
CVE-2022-3202
- EPSS 0.25%
- Veröffentlicht 14.09.2022 15:15:11
- Zuletzt bearbeitet 21.11.2024 07:19:02
A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.
CVE-2022-2964
- EPSS 0.3%
- Veröffentlicht 09.09.2022 15:15:10
- Zuletzt bearbeitet 21.11.2024 07:01:59
A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.
CVE-2022-36280
- EPSS 0.63%
- Veröffentlicht 09.09.2022 15:15:10
- Zuletzt bearbeitet 21.11.2024 07:12:42
An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user accou...
CVE-2022-40307
- EPSS 0.2%
- Veröffentlicht 09.09.2022 05:15:07
- Zuletzt bearbeitet 21.11.2024 07:21:16
An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.