CVE-2022-41222

概要

参考情報

• packetstormsecurity.com/files/168466/Linux-Stable-5.4-5.10-Use-After-Free-Race-Condition.html · Third Party Advisory
• packetstormsecurity.com/files/171005/Kernel-Live-Patch-Security-Notice-LNS-0091-1.html · Patch
• bugs.chromium.org/p/project-zero/issues/detail · Exploit
• cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 · Release Notes
• git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit · Patch
• lists.debian.org/debian-lts-announce/2022/11/msg00001.html · Mailing List
• security.netapp.com/advisory/ntap-20230214-0008 · Third Party Advisory
• cert-portal.siemens.com/productcert/html/ssa-794697.html
• cert-portal.siemens.com/productcert/html/ssa-831302.html

hci baseboard management controller のその他の脆弱性

• CVE-2023-3141高 7.1A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local…
• CVE-2023-2598高 7.8A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that all…
• CVE-2023-32233高 7.8In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary…
• CVE-2023-2236高 7.8A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_insta…
• CVE-2023-2006高 7.0A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the…