|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 9 new CVEs and 10 updated CVEs. * New CVEs CVE-2022-0171: KVM: cache incoherence issue in SEV API may lead to kernel crash CVSS v3 score is not ass
Hi ! It's this week's CVE report. This week reported 9 new CVEs and 10 updated CVEs. * New CVEs CVE-2022-0171: KVM: cache incoherence issue in SEV API may lead to kernel crash CVSS v3 score is not ass
|
By
Masami Ichikawa
· #8411
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 4 new CVEs and 2 updated CVEs. There were no critical vulnerabilities this week. * New CVEs CVE-2021-26401: The speculative execution window of AMD
Hi ! It's this week's CVE report. This week reported 4 new CVEs and 2 updated CVEs. There were no critical vulnerabilities this week. * New CVEs CVE-2021-26401: The speculative execution window of AMD
|
By
Masami Ichikawa
· #8323
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 4 new CVEs and 2 updated CVEs. There were no critical vulnerabilities this week. * New CVEs CVE-2022-1508 : io_uring: reexpand under-reexpanded ite
Hi ! It's this week's CVE report. This week reported 4 new CVEs and 2 updated CVEs. There were no critical vulnerabilities this week. * New CVEs CVE-2022-1508 : io_uring: reexpand under-reexpanded ite
|
By
Masami Ichikawa
· #8252
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 2 new CVEs and 7 updated CVEs. * New CVEs CVE-2022-1419 : drm/vgem: Close use-after-free race in vgem_gem_create CVSS v3 score is not provided Fixe
Hi ! It's this week's CVE report. This week reported 2 new CVEs and 7 updated CVEs. * New CVEs CVE-2022-1419 : drm/vgem: Close use-after-free race in vgem_gem_create CVSS v3 score is not provided Fixe
|
By
Masami Ichikawa
· #8219
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 2 new CVEs and 11 updated CVEs. * New CVEs CVE-2022-1353: af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register CVSS v3
Hi ! It's this week's CVE report. This week reported 2 new CVEs and 11 updated CVEs. * New CVEs CVE-2022-1353: af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register CVSS v3
|
By
Masami Ichikawa
· #8147
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 9 new CVEs and 9 updated CVE. There is no notable new vulnerabilities. CVE-2022-28390(Spectre-BHB for arm) has updated. 19 patches were added to 4.
Hi ! It's this week's CVE report. This week reported 9 new CVEs and 9 updated CVE. There is no notable new vulnerabilities. CVE-2022-28390(Spectre-BHB for arm) has updated. 19 patches were added to 4.
|
By
Masami Ichikawa
· #8086
·
|
|
CIP IRC weekly meeting today on libera.chat
Hi. I think it's okay. I prefer to move permanently an hour early, but it's okay to return to the current time when the end of DST comes. Regards,
Hi. I think it's okay. I prefer to move permanently an hour early, but it's okay to return to the current time when the end of DST comes. Regards,
|
By
Masami Ichikawa
· #8084
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 11 new CVEs and 1 updated CVE. There are three can/usb driver bugs and three ax25 protocol bugs. * New CVEs CVE-2021-3714: Remote Page Deduplicatio
Hi ! It's this week's CVE report. This week reported 11 new CVEs and 1 updated CVE. There are three can/usb driver bugs and three ax25 protocol bugs. * New CVEs CVE-2021-3714: Remote Page Deduplicatio
|
By
Masami Ichikawa
· #8016
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 6 new CVEs and 4 updated CVEs. * New CVEs CVE-2022-0168: smb2_ioctl_query_info NULL Pointer Dereference CVSS v3 score is not provided A local DoS i
Hi ! It's this week's CVE report. This week reported 6 new CVEs and 4 updated CVEs. * New CVEs CVE-2022-0168: smb2_ioctl_query_info NULL Pointer Dereference CVSS v3 score is not provided A local DoS i
|
By
Masami Ichikawa
· #7891
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 8 new CVEs and 2 updated CVEs. * New CVEs CVE-2022-0995: ouf of bounds writes in watch_queue event notification subsystem CVSS v3 score is not prov
Hi ! It's this week's CVE report. This week reported 8 new CVEs and 2 updated CVEs. * New CVEs CVE-2022-0995: ouf of bounds writes in watch_queue event notification subsystem CVSS v3 score is not prov
|
By
Masami Ichikawa
· #7818
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 11 new CVEs and 5 updated CVE. Seven of eleven new CVEs are Xen's vulnerabilities. * New CVEs CVE-2022-23036, CVE-2022-23037, CVE-2022-23038, CVE-2
Hi ! It's this week's CVE report. This week reported 11 new CVEs and 5 updated CVE. Seven of eleven new CVEs are Xen's vulnerabilities. * New CVEs CVE-2022-23036, CVE-2022-23037, CVE-2022-23038, CVE-2
|
By
Masami Ichikawa
· #7763
·
|
|
Fun ahead -- speculation problems being patched in 5.10.105
HI ! That's true. We saw lots of CVEs which recommended disabling unprivileged eBPF. It is difficult to achieve both safety and usefulness :( Regards,
HI ! That's true. We saw lots of CVEs which recommended disabling unprivileged eBPF. It is difficult to achieve both safety and usefulness :( Regards,
|
By
Masami Ichikawa
· #7686
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 12 new CVEs and 3 updated CVEs. CVE-2022-0847 is Dirty Pipe. CVE-2022-0001, CVE-2022-0002, and 2022-23960 are BHI(Spectre-V2 variant). * New CVEs C
Hi ! It's this week's CVE report. This week reported 12 new CVEs and 3 updated CVEs. CVE-2022-0847 is Dirty Pipe. CVE-2022-0001, CVE-2022-0002, and 2022-23960 are BHI(Spectre-V2 variant). * New CVEs C
|
By
Masami Ichikawa
· #7685
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 2 new CVEs and 2 updated CVE. * New CVEs CVE-2020-36516: Off-Path TCP Exploits of the Mixed IPID Assignment CVSS v3 score is not provided An issue
Hi ! It's this week's CVE report. This week reported 2 new CVEs and 2 updated CVE. * New CVEs CVE-2020-36516: Off-Path TCP Exploits of the Mixed IPID Assignment CVSS v3 score is not provided An issue
|
By
Masami Ichikawa
· #7649
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 7 new CVEs and 1 updated CVE. * New CVEs CVE-2022-0644: vfs: check fd has read access in kernel_read_file_from_fd() CVSS v3 score is not provided T
Hi ! It's this week's CVE report. This week reported 7 new CVEs and 1 updated CVE. * New CVEs CVE-2022-0644: vfs: check fd has read access in kernel_read_file_from_fd() CVSS v3 score is not provided T
|
By
Masami Ichikawa
· #7639
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 9 new CVEs. * New CVEs CVE-2021-44879: f2fs: fix to do sanity check on inode type during garbage collection CVSS v3 score is not provided In gc_dat
Hi ! It's this week's CVE report. This week reported 9 new CVEs. * New CVEs CVE-2021-44879: f2fs: fix to do sanity check on inode type during garbage collection CVSS v3 score is not provided In gc_dat
|
By
Masami Ichikawa
· #7627
·
|
|
New CVE entries this week
Hi ! It's this week's CVE report. This week reported 5 new CVEs. * New CVEs CVE-2021-3894: sctp: local DoS: unprivileged user can cause BUG() CVSS v3 score is not provided A local unprivileged user ca
Hi ! It's this week's CVE report. This week reported 5 new CVEs. * New CVEs CVE-2021-3894: sctp: local DoS: unprivileged user can cause BUG() CVSS v3 score is not provided A local unprivileged user ca
|
By
Masami Ichikawa
· #7588
·
|
|
New CVE entries this week
Hi! It's this week's CVE report. This week reported 8 new CVEs. * New CVEs CVE-2022-22942: drm/vmwgfx: Fix stale file descriptors on failed usercopy CVSS v3 score is not provided A local attacker who
Hi! It's this week's CVE report. This week reported 8 new CVEs. * New CVEs CVE-2022-22942: drm/vmwgfx: Fix stale file descriptors on failed usercopy CVSS v3 score is not provided A local attacker who
|
By
Masami Ichikawa
· #7565
·
|
|
New CVE entries in this week
Hi ! Yes. Stable kernels were fixed :) stable/4.14: [eed39c1918f1803948d736c444bfacba2a482ad0] stable/4.19: [b188780649081782e341e52223db47c49f172712] stable/4.4: [db6a2082d5a2ebc5ffa41f7213a544d55f73
Hi ! Yes. Stable kernels were fixed :) stable/4.14: [eed39c1918f1803948d736c444bfacba2a482ad0] stable/4.19: [b188780649081782e341e52223db47c49f172712] stable/4.4: [db6a2082d5a2ebc5ffa41f7213a544d55f73
|
By
Masami Ichikawa
· #7520
·
|
|
New CVE entries in this week
Hi ! <nobuhiro1.iwamatsu@...> wrote: I did a quick check to apply 61fad68 ("net/packet: tpacket_rcv: avoid a producer race condition"), it seems that we may at least need following patches.
Hi ! <nobuhiro1.iwamatsu@...> wrote: I did a quick check to apply 61fad68 ("net/packet: tpacket_rcv: avoid a producer race condition"), it seems that we may at least need following patches.
|
By
Masami Ichikawa
· #7516
·
|