rpm package
almalinux/kernel-cross-headers
pkg:rpm/almalinux/kernel-cross-headers
Vulnerabilities (1,328)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-20141 | Hig | 7.0 | < 5.14.0-284.11.1.el9_2 | 5.14.0-284.11.1.el9_2 | Jun 15, 2022 | In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product | |
| CVE-2022-21499 | Med | 6.7 | < 4.18.0-425.3.1.el8 | 4.18.0-425.3.1.el8 | Jun 9, 2022 | KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Scor | |
| CVE-2022-1998 | Hig | 7.8 | < 5.14.0-162.6.1.el9_1 | 5.14.0-162.6.1.el9_1 | Jun 9, 2022 | A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system. | |
| CVE-2022-32250 | Hig | 7.8 | < 4.18.0-372.19.1.el8_6 | 4.18.0-372.19.1.el8_6 | Jun 2, 2022 | net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free. | |
| CVE-2022-1789 | Med | 6.8 | < 5.14.0-284.11.1.el9_2 | 5.14.0-284.11.1.el9_2 | Jun 2, 2022 | With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference. | |
| CVE-2022-1462 | Med | 6.3 | < 5.14.0-284.11.1.el9_2 | 5.14.0-284.11.1.el9_2 | Jun 2, 2022 | An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local u | |
| CVE-2022-1882 | Hig | 7.8 | < 5.14.0-284.11.1.el9_2 | 5.14.0-284.11.1.el9_2 | May 26, 2022 | A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on t | |
| CVE-2022-29581 | Hig | 7.8 | < 4.18.0-425.3.1.el8 | 4.18.0-425.3.1.el8 | May 17, 2022 | Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions. | |
| CVE-2022-1679 | Hig | 7.8 | < 5.14.0-162.6.1.el9_1 | 5.14.0-162.6.1.el9_1 | May 16, 2022 | A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system. | |
| CVE-2022-30594 | Hig | 7.8 | < 5.14.0-70.30.1.el9_0 | 5.14.0-70.30.1.el9_0 | May 12, 2022 | The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag. | |
| CVE-2022-1353 | Hig | 7.1 | < 4.18.0-372.32.1.el8_6 | 4.18.0-372.32.1.el8_6 | Apr 29, 2022 | A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information. | |
| CVE-2022-1048 | Hig | 7.0 | < 4.18.0-425.3.1.el8 | 4.18.0-425.3.1.el8 | Apr 29, 2022 | A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalat | |
| CVE-2022-1280 | Med | 6.3 | < 5.14.0-162.6.1.el9_1 | 5.14.0-162.6.1.el9_1 | Apr 13, 2022 | A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service (DoS) or a kernel information leak. | |
| CVE-2022-28893 | Hig | 7.8 | < 4.18.0-425.3.1.el8 | 4.18.0-425.3.1.el8 | Apr 11, 2022 | The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state. | |
| CVE-2022-28390 | Hig | 7.8 | < 4.18.0-425.3.1.el8 | 4.18.0-425.3.1.el8 | Apr 3, 2022 | ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free. | |
| CVE-2022-28388 | Med | 5.5 | < 5.14.0-284.11.1.el9_2 | 5.14.0-284.11.1.el9_2 | Apr 3, 2022 | usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free. | |
| CVE-2022-1055 | Hig | 7.8 | < 5.14.0-70.22.1.el9_0 | 5.14.0-70.22.1.el9_0 | Mar 29, 2022 | A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 | |
| CVE-2022-27950 | Med | 5.5 | < 4.18.0-425.3.1.el8 | 4.18.0-425.3.1.el8 | Mar 28, 2022 | In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition. | |
| CVE-2022-0494 | Med | 4.4 | < 5.14.0-70.22.1.el9_0 | 5.14.0-70.22.1.el9_0 | Mar 25, 2022 | A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality. | |
| CVE-2022-0322 | Med | 5.5 | < 4.18.0-372.9.1.el8 | 4.18.0-372.9.1.el8 | Mar 25, 2022 | A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of s |
- affected < 5.14.0-284.11.1.el9_2fixed 5.14.0-284.11.1.el9_2
In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product
- affected < 4.18.0-425.3.1.el8fixed 4.18.0-425.3.1.el8
KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Scor
- affected < 5.14.0-162.6.1.el9_1fixed 5.14.0-162.6.1.el9_1
A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
- affected < 4.18.0-372.19.1.el8_6fixed 4.18.0-372.19.1.el8_6
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
- affected < 5.14.0-284.11.1.el9_2fixed 5.14.0-284.11.1.el9_2
With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.
- affected < 5.14.0-284.11.1.el9_2fixed 5.14.0-284.11.1.el9_2
An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local u
- affected < 5.14.0-284.11.1.el9_2fixed 5.14.0-284.11.1.el9_2
A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on t
- affected < 4.18.0-425.3.1.el8fixed 4.18.0-425.3.1.el8
Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.
- affected < 5.14.0-162.6.1.el9_1fixed 5.14.0-162.6.1.el9_1
A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system.
- affected < 5.14.0-70.30.1.el9_0fixed 5.14.0-70.30.1.el9_0
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.
- affected < 4.18.0-372.32.1.el8_6fixed 4.18.0-372.32.1.el8_6
A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.
- affected < 4.18.0-425.3.1.el8fixed 4.18.0-425.3.1.el8
A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalat
- affected < 5.14.0-162.6.1.el9_1fixed 5.14.0-162.6.1.el9_1
A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service (DoS) or a kernel information leak.
- affected < 4.18.0-425.3.1.el8fixed 4.18.0-425.3.1.el8
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.
- affected < 4.18.0-425.3.1.el8fixed 4.18.0-425.3.1.el8
ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
- affected < 5.14.0-284.11.1.el9_2fixed 5.14.0-284.11.1.el9_2
usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.
- affected < 5.14.0-70.22.1.el9_0fixed 5.14.0-70.22.1.el9_0
A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
- affected < 4.18.0-425.3.1.el8fixed 4.18.0-425.3.1.el8
In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition.
- affected < 5.14.0-70.22.1.el9_0fixed 5.14.0-70.22.1.el9_0
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.
- affected < 4.18.0-372.9.1.el8fixed 4.18.0-372.9.1.el8
A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of s
Page 64 of 67