Kirill Tkhai discovered that the XFS file system implementation in the
Linux kernel did not calculate size correctly when pre-allocating space in
some situations. A local attacker could use this to expose sensitive
information. (CVE-2021-4155)
Lee Jones discovered that a use-after-free vulnerability existed in the
Bluetooth implementation in the Linux kernel. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2022-20566)
Duoming Zhou discovered that a race condition existed in the SLIP driver in
the Linux kernel, leading to a null pointer dereference vulnerability. An
attacker could use this to cause a denial of service (system crash).
(CVE-2022-41858)
Tamás Koczka discovered that the Bluetooth L2CAP implementation in the
Linux kernel did not properly initialize memory in some situations. A
physically proximate attacker could possibly use this to expose sensitive
information (kernel memory). (CVE-2022-42895)
José Oliveira and Rodrigo Branco discovered that the prctl syscall
implementation in the Linux kernel did not properly protect against
indirect branch prediction attacks in some situations. A local attacker
could possibly use this to expose sensitive information. (CVE-2023-0045)
It was discovered that the RNDIS USB driver in the Linux kernel contained
an integer overflow vulnerability. A local attacker with physical access
could plug in a malicious USB device to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2023-23559)
More Stories
crosswords-0.3.13.3-4.fc41
FEDORA-2024-851219f5e3 Packages in this update: crosswords-0.3.13.3-4.fc41 Update description: Update to 0.3.13.3 and fix gresource generation Read More
perl-App-cpanminus-1.7047-2.fc39
FEDORA-2024-78e43b4de6 Packages in this update: perl-App-cpanminus-1.7047-2.fc39 Update description: Patch the code to use https instead of http (CVE-2024-45321) Read More
perl-App-cpanminus-1.7047-4.fc40
FEDORA-2024-aaa468ae4f Packages in this update: perl-App-cpanminus-1.7047-4.fc40 Update description: Patch the code to use https instead of http (CVE-2024-45321) Read More
perl-App-cpanminus-1.7047-5.fc41
FEDORA-2024-ef9db8b16d Packages in this update: perl-App-cpanminus-1.7047-5.fc41 Update description: Patch the code to use https instead of http (CVE-2024-45321) Read More
logiops-0.3.5-1.fc39
FEDORA-2024-69ce052378 Packages in this update: logiops-0.3.5-1.fc39 Update description: Fixes CVE-2024-45752: A vulnerability that allows users to remap keys arbitrarily. This...
logiops-0.3.5-1.fc40
FEDORA-2024-326390f033 Packages in this update: logiops-0.3.5-1.fc40 Update description: Fixes CVE-2024-45752: A vulnerability that allows users to remap keys arbitrarily. This...