Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Debian 5.10.162-1 Critical: Linux Kernel Denial of Service Threat

debian
Calendar Grey January 23, 2023
Debian Logo
Debian Security Advisory DSA-5325-1 addresses vulnerabilities within the networking subsystem that could result in unauthorized access and service disruption.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks

Summary

CVE-2022-2873

Zheyu Ma discovered that an out-of-bounds memory access flaw in the
Intel iSMT SMBus 2.0 host controller driver may result in denial of
service (system crash).

CVE-2022-3545

It was discovered that the Netronome Flow Processor (NFP) driver
contained a use-after-free flaw in area_cache_get(), which may
result in denial of service or the execution of arbitrary code.

CVE-2022-3623

A race condition when looking up a CONT-PTE/PMD size hugetlb page
may result in denial of service or an information leak.

CVE-2022-4696

A use-after-free vulnerability was discovered in the io_uring
subsystem.

CVE-2022-36280

An out-of-bounds memory write vulnerability was discovered in the
vmwgfx driver, which may allow a local unprivileged user to cause a
denial of service (system crash).

CVE-2022-41218

Hyunwoo Kim reported a use-after-free flaw in the Media DVB core
subsystem caused by refcount races, which may allow a local user to
cause a denial of se...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Package: linux
CVE ID: CVE-2022-2873 CVE-2022-3545 CVE-2022-3623 CVE-2022-4696

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here