Vuldb Updates

A vulnerability has been found in Linux Kernel up to 5.18.17/5.19.1 and classified as critical. This impacts the function readahead_folio of the component cifs. Performing manipulation results in memory leak. This vulnerability was named CVE-2022-50107. The attack needs to be approached within the local network. There is no available exploit. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 5.19.1. It has been rated as problematic. This issue affects the function trace_spmi_write_begin of the component spmi. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2022-50094. The attack requires access to the local network. No exploit is available. Upgrading the affected component is advised.

A vulnerability described as critical has been identified in Linux Kernel up to 5.10.136/5.15.60/5.18.17/5.19.1. Impacted is the function exit_itimers. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2022-50095. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 5.15.60/5.18.17/5.19.1 and classified as problematic. Affected by this issue is the function early_param. Executing manipulation can lead to improper initialization. This vulnerability is tracked as CVE-2022-50091. The attack is only possible within the local network. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability described as problematic has been identified in Linux Kernel up to 5.4.210/5.10.136/5.15.60/5.18.17/5.19.1. This vulnerability affects the function arch_test_bit of the component vt-d. The manipulation results in improper validation of array index. This vulnerability is identified as CVE-2022-50093. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 5.4.210/5.10.136/5.15.60/5.18.17/5.19.1. It has been declared as critical. This affects the function dm_pool_register_metadata_threshold. Executing manipulation can lead to use after free. This vulnerability appears as CVE-2022-50092. The attacker needs to be present on the local network. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.15.63/5.18.17/5.19.1. Affected by this vulnerability is the function btrfs_buffered_write of the file fs/btrfs/block-rsv.c. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2022-50090. The attack must be carried out from within the local network. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.19.1. This affects the function get_scpi_ops of the component firmware. The manipulation results in use after free. This vulnerability was named CVE-2022-50087. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is advised.

A vulnerability has been found in Linux Kernel up to 5.18.17/5.19.1 and classified as critical. Affected by this vulnerability is the function damon_reclaim_init. Performing manipulation results in memory leak. This vulnerability is identified as CVE-2022-50088. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 5.15.60/5.18.17/5.19.1. It has been classified as problematic. This affects the function cow_file_range of the file /proc/sys/kernel/hung_task_timeout_secs of the component btrfs. The manipulation leads to unchecked return value. This vulnerability is listed as CVE-2022-50089. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 5.19.1. It has been rated as problematic. This affects the function raid_status. This manipulation causes out-of-bounds read. This vulnerability is handled as CVE-2022-50084. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Linux Kernel up to 5.15.60/5.18.17/5.19.1. The affected element is the function kzalloc of the component block. Performing manipulation results in denial of service. This vulnerability is identified as CVE-2022-50086. The attack can only be performed from the local network. There is not any exploit available. It is recommended to upgrade the affected component.

This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.19.1. This impacts the function raid_resume of the file lvconvert-raid.sh. This manipulation causes allocation of resources. The identification of this vulnerability is CVE-2022-50085. The attack needs to be done within the local network. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 5.15.62/5.19.3. This affects the function try_get_module of the file /dev/kvm. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2022-50081. The attack needs to be initiated within the local network. No exploit is available. The affected component should be upgraded.

A vulnerability described as critical has been identified in Linux Kernel up to 5.10.136/5.15.60/5.18.17/5.19.1. The affected element is the function ext4_iomap_begin of the file fs/ext4/inode.c of the component ext4. Executing manipulation can lead to buffer overflow. This vulnerability is handled as CVE-2022-50082. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Linux Kernel up to 5.19.2. Impacted is the function register_shm_helper of the component tee. Performing manipulation results in null pointer dereference. This vulnerability is known as CVE-2022-50080. Access to the local network is required for this attack. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 5.15.62/5.19.3. The impacted element is the function eng_id. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2022-50079. The attack can only be initiated within the local network. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.15.62/5.19.3. It has been declared as critical. This issue affects the function pt_regs of the component knlGS. Executing manipulation can lead to null pointer dereference. This vulnerability is handled as CVE-2022-50078. The attack can only be done within the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 5.19.3. Affected by this issue is the function aa_pivotroot of the component apparmor. Executing manipulation can lead to improper update of reference count. This vulnerability is handled as CVE-2022-50077. The attack can only be done within the local network. There is not any exploit available. It is advisable to upgrade the affected component.