alsa-2022:7683
Vulnerability from osv_almalinux
Published
2022-11-08 00:00
Modified
2022-11-11 21:27
Summary
Moderate: kernel security, bug fix, and enhancement update
Details
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516)
- race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference (CVE-2020-36558)
- use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640)
- memory leak for large arguments in video_usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c (CVE-2021-30002)
- smb2_ioctl_query_info NULL Pointer Dereference (CVE-2022-0168)
- NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617)
- swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854)
- uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016)
- race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048)
- use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
- use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184)
- NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852)
- buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078)
- nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)
- openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)
- use-after-free when psi trigger is destroyed while being polled (CVE-2022-2938)
- net/packet: slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368)
- possible to use the debugger to write zero into a location of choice (CVE-2022-21499)
- Spectre-BHB (CVE-2022-23960)
- Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)
- memory leak in drivers/hid/hid-elo.c (CVE-2022-27950)
- double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390)
- use after free in SUNRPC subsystem (CVE-2022-28893)
- use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581)
- DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946)
- nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
References
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "bpftool"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-abi-stablelists"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-cross-headers"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-debug"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-debug-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-debug-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-debug-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-debug-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-doc"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-headers"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-tools"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-tools-libs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-tools-libs-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-zfcpdump"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-zfcpdump-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-zfcpdump-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-zfcpdump-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "kernel-zfcpdump-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "perf"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "python3-perf"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-425.3.1.el8"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* off-path attacker may inject data or terminate victim\u0027s TCP session (CVE-2020-36516)\n* race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference (CVE-2020-36558)\n* use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640)\n* memory leak for large arguments in video_usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c (CVE-2021-30002)\n* smb2_ioctl_query_info NULL Pointer Dereference (CVE-2022-0168)\n* NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617)\n* swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854)\n* uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016)\n* race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048)\n* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)\n* use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184)\n* NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852)\n* buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078)\n* nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)\n* openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)\n* use-after-free when psi trigger is destroyed while being polled (CVE-2022-2938)\n* net/packet: slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368)\n* possible to use the debugger to write zero into a location of choice (CVE-2022-21499)\n* Spectre-BHB (CVE-2022-23960)\n* Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)\n* memory leak in drivers/hid/hid-elo.c (CVE-2022-27950)\n* double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390)\n* use after free in SUNRPC subsystem (CVE-2022-28893)\n* use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581)\n* DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946)\n* nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.",
"id": "ALSA-2022:7683",
"modified": "2022-11-11T21:27:25Z",
"published": "2022-11-08T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2022:7683"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2020-36516"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2020-36558"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-30002"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-3640"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-0168"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-0617"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-0854"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-1016"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-1048"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-1055"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-1184"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-1852"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-20368"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-2078"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-21499"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-23960"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24448"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-2586"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-26373"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-2639"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27950"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-28390"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-28893"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-2938"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-29581"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-36946"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/1946279"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/1980646"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2037386"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2051444"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2053632"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2058395"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2059928"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2062284"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2066614"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2066706"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2069408"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2070205"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2070220"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2073064"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074208"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2084183"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2084479"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2088021"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2089815"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2096178"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2112693"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2114878"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2115065"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2115278"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2120175"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2123695"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/8/ALSA-2022-7683.html"
}
],
"related": [
"CVE-2020-36516",
"CVE-2020-36558",
"CVE-2021-3640",
"CVE-2021-30002",
"CVE-2022-0168",
"CVE-2022-0617",
"CVE-2022-0854",
"CVE-2022-1016",
"CVE-2022-1048",
"CVE-2022-1055",
"CVE-2022-1184",
"CVE-2022-1852",
"CVE-2022-2078",
"CVE-2022-2586",
"CVE-2022-2639",
"CVE-2022-2938",
"CVE-2022-20368",
"CVE-2022-21499",
"CVE-2022-23960",
"CVE-2022-26373",
"CVE-2022-27950",
"CVE-2022-28390",
"CVE-2022-28893",
"CVE-2022-29581",
"CVE-2022-36946",
"CVE-2022-24448"
],
"summary": "Moderate: kernel security, bug fix, and enhancement update"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…