BDU:2022-02817

Уязвимость функции io_rw_init_file ядра операционной системы Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Severity: LOW (3.3) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References:

CVE-2022-29968

Published: 2022-04-26

BDU:2022-04052

Уязвимость компонента drivers/block/floppy.c ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании

Severity: LOW (3.3) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References:

CVE-2022-33981

Published: 2022-05-02
Modified: 2024-11-21

CVE-2022-29968

An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2022-06-18
Modified: 2024-11-21

CVE-2022-33981

drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function.

Severity: LOW (3.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References:

Provides: kernel-modules-ipset

Capabilities and Limits (768 CPU support.)

Version: 2.1.0

Package kernel-image-un-def update in sisyphus on 2022-05-10

ALT-PU-2022-1835-1

Closed vulnerabilities

BDU:2022-02817

BDU:2022-04052

CVE-2022-29968

CVE-2022-33981

Closed bugs

Bug #42672

Bug #42694