huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2022-1343: openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS
Component: openssl
Severity: Moderate
CWE: CWE-295 (Improper Certificate Validation)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Public date: 2022-05-03T00:00:00+00:00

A flaw was found in OpenSSL's Online Certificate Status Protocol (OCSP) response functionality in the signer certificate verification routines. This flaw could result in a linked application falsely believing that an x.509 Digital Certificate is either "good" or "unknown" when revoked and requires that the application use a non-default configuration. This vulnerability leads to an issue with data integrity and confidentiality.

Statement: This flaw impact has been rated Moderate because the configuration required for it to occur is non-default, not common, and there is still an indication of failure at the CLI for the OCSP application.

Affected upstream versions: Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)
Fixed upstream versions: 3.0-POST-CLANG-FORMAT-WEBKIT
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 2eda98790c5c2741d76d23cc1e74b0dc4f4b391a
CVE-2022-1353: kernel: kernel info leak issue in pfkey_register
Component: kernel
Severity: Moderate
CWE: CWE-212 (Improper Removal of Sensitive Information Before Storage or Transfer)
CVSS v3: 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Public date: 2022-03-21T00:00:00+00:00

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.


Affected upstream versions: kernel 5.17 rc12
Fixed upstream versions: v5.17
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 9a564bccb78a76740ea9d75a259942df8143d02c
CVE-2022-1354: libtiff: heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c
Component: libtiff
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2022-04-12T00:00:00+00:00

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

Statement: In order to successfully exploit this vulberability, the attacker needs to create a specially crafted TIFF file designed to exploit the buffer overflow in the TIFFReadRawDataStriped() function. The attacker must then convince or trick a user into processing the malicious TIFF file using the tiffinfo tool.

Considering the high bar of prerequisites for successful exploitation, RH ProdSec has set the Impact of this vulnerability to "Low"

Affected upstream versions: Not-Known
Fixed upstream versions: v4.4.0
Upstream repository: https://gitlab.com/libtiff/libtiff
Upstream fix commit: 87f580f39011109b3bb5f6eca13fac543a542798
CVE-2022-1365: cross-fetch: Exposure of Private Personal Information to an Unauthorized Actor
Component: cross-fetch
Severity: Moderate
CWE: CWE-359 (Exposure of Private Personal Information to an Unauthorized Actor)
CVSS v3: 7.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Public date: 2022-04-16T00:00:00+00:00

A flaw was found in the cross-fetch library when fetching a remote URL with a cookie when it gets to the Location response header. This flaw allows an attacker to hijack the account as the cookie is leaked.


Affected upstream versions: unspecified < 3.1.5
Fixed upstream versions: 3.1.5
Upstream repository: https://github.com/lquixada/cross-fetch
Upstream fix commit: a3b3a9481091ddd06b8f83784ba9c4e034dc912a
CVE-2022-1420: vim: Out-of-range Pointer Offset
Component: vim
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.1 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Public date: 2022-04-21T00:00:00+00:00

A vulnerability was found in Vim. The issue occurs when using a number in a string for the lambda name, triggering an out-of-range pointer offset vulnerability. This flaw allows an attacker to trick a user into opening a crafted script containing an argument as a number and then using it as a string pointer to access any memory location, causing an application to crash and possibly access some memory.


Affected upstream versions: unspecified < 8.2.4774
Fixed upstream versions: 8.2.4774
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 8b91e71441069b1dde9ac9ff9d9a829b1b4aecca
CVE-2022-1473: openssl: OPENSSL_LH_flush() breaks reuse of memory
Component: openssl
Severity: Moderate
CWE: CWE-772 (Missing Release of Resource after Effective Lifetime)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-05-03T00:00:00+00:00

A memory leak flaw was found in OpenSSL, resulting in TLS servers and clients being halted by out-of-memory conditions, leading to a denial of service. An attacker needs to repeat actions continuously to trigger this vulnerability, resulting in a loss of application availability.


Affected upstream versions: Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)
Fixed upstream versions: 3.0-POST-CLANG-FORMAT-WEBKIT
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 64c85430f95200b6b51fe9475bd5203f7c19daf1
CVE-2022-1586: pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c
Component: pcre2
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-03-23T00:00:00+00:00

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the  pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.


Affected upstream versions: Fixed in pcre2-10.40.
Fixed upstream versions: pcre2-10.40
Upstream repository: https://github.com/PCRE2Project/pcre2
Upstream fix commit: d4fa336fbcc388f89095b184ba6d99422cfc676c
CVE-2022-1587: pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c
Component: pcre2
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-03-26T00:00:00+00:00

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.


Affected upstream versions: Fixed in pcre2-10.40.
Fixed upstream versions: pcre2-10.40
Upstream repository: https://github.com/PCRE2Project/pcre2
Upstream fix commit: 03654e751e7f0700693526b67dfcadda6b42c9d0
CVE-2022-1621: vim: heap buffer overflow in vim_strncpy
Component: vim
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.3 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H)
Public date: 2022-05-10T00:00:00+00:00

A flaw was found in vim, where it is vulnerable to a heap buffer overflow in the vim_strncpy find_word function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim.


Affected upstream versions: unspecified < 8.2.4919
Fixed upstream versions: 8.2.4919
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 7c824682d2028432ee082703ef0ab399867a089b
CVE-2022-1629: vim: buffer over-read in function find_next_quote
Component: vim
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-05-10T00:00:00+00:00

A flaw was found in vim, where it is vulnerable to a buffer over-read in the find_next_quote function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim.

Statement: Red Hat Product Security has rated this issue as having a Low security impact, because the "victim" has to run an untrusted file IN SCRIPT MODE. Someone who is running untrusted files in script mode is equivalent to someone just taking a random python script and running it.

For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/

Affected upstream versions: unspecified < 8.2.4925
Fixed upstream versions: 8.2.4925
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 53a70289c2712808e6d4e88927e03cac01b470dd
CVE-2022-1650: eventsource: Exposure of Sensitive Information
Component: eventsource
Severity: Important
CWE: CWE-359 (Exposure of Private Personal Information to an Unauthorized Actor)
CVSS v3: 9.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)
Public date: 2022-05-12T00:00:00+00:00

A flaw was found in the EventSource NPM Package. The description from the source states the following message: "Exposure of Sensitive Information to an Unauthorized Actor." This flaw allows an attacker to steal the user's credentials and then use the credentials to access the legitimate website.


Affected upstream versions: v2.0.0 < unspecified, unspecified < v2.0.2, unspecified <= v1.1.0
Fixed upstream versions: unspecified, v1.1.1, v2.0.2
Upstream repository: https://github.com/eventsource/eventsource
Upstream fix commit: 10ee0c4881a6ba2fe65ec18ed195ac35889583c4
CVE-2022-1706: ignition: configs are accessible from unprivileged containers in VMs running on VMware products
Component: ignition
Severity: Moderate
CWE: CWE-863 (Incorrect Authorization)
CVSS v3: 7.5 (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L)
Public date: 2022-05-04T00:00:00+00:00

A vulnerability was found in Ignition, where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets.

Statement: RHCOS may be less impacted than other distros since OCP's default Ignition config only contains a pointer to a config served by the Machine Config Server, and  OCP prevents containers from accessing the MCS directly.  So, the scope on RHCOS should be limited to any VMware users who manually modify the pointer config to include secrets.

Affected upstream versions: Fixed in coreos/ignition v2.14.0
Fixed upstream versions: v2.14.0
Upstream repository: https://github.com/coreos/ignition
Upstream fix commit: 4b70b44b430ecf8377a276e89b5acd3a6957d4ea
CVE-2022-1708: cri-o: memory exhaustion on the node when access to the kube api
Component: cri-o
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 6.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H)
Public date: 2022-06-06T00:00:00+00:00

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command.  The highest threat from this vulnerability is system availability.

Statement: The vulnerability exists in reading of the output file from the ExecSync command, by the CRI-O in the Kubernetes,if the file were to be too large, then this would lead to resource exhaustion,the attack is purely theoretical in nature and would only lead to a denial of service,moreover the attacker would require code execution to exploit this making this a moderate vulnerability at best.

Affected upstream versions: Affects cri-o <= 1.24.0, 1.23.2, 1.22.4, Fixed-in 1.24.1, 1.23.3, 1.22.5
Fixed upstream versions: v1.25.0
Upstream repository: https://github.com/cri-o/cri-o
Upstream fix commit: f032cf649ecc7e0c46718bd9e7814bfb317cb544
CVE-2022-1729: kernel: race condition in perf_event_open leads to privilege escalation
Component: kernel
Severity: Important
CWE: CWE-366 (Race Condition within a Thread)
CVSS v3: 7.4 (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-05-20T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERF_TYPE_TRACEPOINT and sub PERF_EVENT_HARDWARE plus the PERF_EVENT_SOFTWARE using the perf_event_open() function with these three types. This flaw allows a local user to crash the system.


Affected upstream versions: linux kernel 5.18 rc9
Fixed upstream versions: v5.18
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 3ac6487e584a1eb54071dbe1212e05b884136704
CVE-2022-1785: vim: Out-of-bounds Write
Component: vim
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Public date: 2022-05-19T00:00:00+00:00

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds write vulnerability in the ex_cmds function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.


Affected upstream versions: unspecified < 8.2.4977
Fixed upstream versions: 8.2.4977
Upstream repository: https://github.com/vim/vim
Upstream fix commit: e2bd8600b873d2cd1f9d667c28cba8b1dba18839
CVE-2022-1852: kernel: NULL pointer dereference in x86_emulate_insn may lead to DoS
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-06-01T00:00:00+00:00

A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU.


Affected upstream versions: kernel 5.19 rc1
Fixed upstream versions: v5.19
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: fee060cd52d69c114b62d1a2948ea9648b5131f9
CVE-2022-1897: vim: out-of-bounds write in vim_regsub_both() in regexp.c
Component: vim
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-05-25T00:00:00+00:00

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds write vulnerability in the vim_regsub_both function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.


Affected upstream versions: unspecified < 8.2
Fixed upstream versions: 8.2
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 338f1fc0ee3ca929387448fe464579d6113fa76a
CVE-2022-1927: vim: buffer over-read in utf_ptr2char() in mbyte.c
Component: vim
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-05-22T00:00:00+00:00

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a buffer over-read vulnerability in the utf_ptr2char function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.


Affected upstream versions: unspecified < 8.2
Fixed upstream versions: 8.2
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 4d97a565ae8be0d4debba04ebd2ac3e75a0c8010
CVE-2022-1996: go-restful: Authorization Bypass Through User-Controlled Key
Component: go-restful
Severity: Important
CWE: CWE-639 (Authorization Bypass Through User-Controlled Key)
CVSS v3: 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Public date: 2022-06-08T00:00:00+00:00

A flaw was found in CORS Filter feature from the go-restful package. When a user inputs a domain which is in AllowedDomains, all domains starting with the same pattern are accepted. This issue could allow an attacker to break the CORS policy by allowing any page to make requests and retrieve data on behalf of users.

Statement: The go-restful package is a transitive dependency which is being pulled with k8s.io/api and not directly being used anywhere in OpenShift Container Platform (OCP), OpenShift Container Storage, OpenShift Data Foundation, OpenShift Do and OpenShift Pipelines, hence these components are marked as 'Will not fix' or even "Not affected".

Affected upstream versions: unspecified < v3.8.0
Fixed upstream versions: v3.8.0
Upstream repository: https://github.com/emicklei/go-restful
Upstream fix commit: fd3c327a379ce08c68ef18765bdc925f5d9bad10
CVE-2022-1998: kernel: fanotify misuses fd_install() which could lead to use-after-free
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 6.4 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-01-27T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s File System notify functionality in the way a user triggers the copy_info_records_to_user() function call to fail in copy_event_to_user(). This flaw allows a local user to crash or potentially escalate their privileges on the system.


Affected upstream versions: Linux kernel 5.17-rc3
Fixed upstream versions: v5.17
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/notify/fanotify/fanotify_user.c
Upstream fix commit: ee12595147ac1fbfb5bcb23837e26dd58d94b15d
CVE-2022-20141: kernel: igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets
Component: kernel
Severity: Moderate
CWE: CWE-667 (Improper Locking)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2021-07-16T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s IGMP protocol in how a user triggers a race condition in the ip_check_mc_rcu function. This flaw allows a local user to crash or potentially escalate their privileges on the system.


Affected upstream versions: Android kernel
Fixed upstream versions: v5.15
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv4/igmp.c
Upstream fix commit: 23d2b94043ca8835bd1e67749020e839f396a1c2
CVE-2022-2068: openssl: the c_rehash script allows command injection
Component: openssl
Severity: Moderate
CWE: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
CVSS v3: 6.7 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-06-21T00:00:00+00:00

A flaw was found in OpenSSL. The issue in CVE-2022-1292 did not find other places in the `c_rehash` script where it possibly passed the file names of certificates being hashed to a command executed through the shell. Some operating systems distribute this script in a manner where it is automatically executed. On these operating systems, this flaw allows an attacker to execute arbitrary commands with the privileges of the script.

Statement: Red Hat Enterprise Linux uses a system-wide store of trusted certificates bundled in a single file and updated via `update-ca-trust`. The `c_rehash` script is not included in the default installation on any supported RHEL version and is never executed automatically. For these reasons, this flaw has been rated as having a security impact of Moderate.

Red Hat Enterprise Linux 7 provides a vulnerable version of the `c_rehash` script in the `openssl-perl` package, available only through the unsupported Optional repository.  As the Optional repository is not supported and Red Hat Enterprise Linux 7 is in Maintenance Support 2 Phase, this issue is not planned to be addressed there.

Red Hat Satellite ships an affected version of the `c_rehash` script embedded in `puppet-agent` package, however, the product is not vulnerable since it does not execute scripts with untrusted data. Moreover, the scriplet is owned by root user and is supposed to be accessed only by administrators.

Red Hat updates the OpenSSL compatibility packages (compat-openssl) to only address Important or Critical security issues with backported security patches.

Affected upstream versions: Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3), Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o), Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze)
Fixed upstream versions: 3.0-POST-CLANG-FORMAT-WEBKIT
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 2c9c35870601b4a44d86ddbf512b38df38285cfa
CVE-2022-2078: kernel: buffer overflow in nft_set_desc_concat_parse()
Component: kernel
Severity: Moderate
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-05-31T06:30:00+00:00

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.


Affected upstream versions: kernel 5.19 rc1
Fixed upstream versions: v5.19
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c
Upstream fix commit: fecf31ee395b0295f2d7260aa29946b7605f7c85
CVE-2022-2097: openssl: AES OCB fails to encrypt some bytes
Component: openssl
Severity: Moderate
CWE: CWE-325 (Missing Cryptographic Step)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Public date: 2022-07-05T00:00:00+00:00

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimized implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed.

Statement: Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7 ship OpenSSL 1.0 which does not contain the incorrect assembly code (introduced upstream with commit bd30091). Similarly, the versions of `shim` as shipped with Red Hat Enterprise Linux 8 and 9 are not affected by this issue as they bundle openssl-1.0.2j.

Affected upstream versions: Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4), Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p)
Fixed upstream versions: 3.0-POST-CLANG-FORMAT-WEBKIT
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: a98f339ddd7e8f487d6e0088d4a9a42324885a93
CVE-2022-21499: kernel: possible to use the debugger to write zero into a location of choice
Component: kernel
Severity: Moderate
CWE: CWE-267 (Privilege Defined With Unsafe Actions)
CVSS v3: 6.7 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-05-24T17:00:00+00:00

A flaw was found in the kernel/debug/debug_core.c in the Linux kernel in lockdown mode. This flaw allows an attacker with local access to trigger the debugger, bypass lockdown and write anonymously.


Affected upstream versions: Oracle Linux: 6, Oracle Linux: 7, Oracle Linux: 8, Oracle VM: 3
Fixed upstream versions: v5.19
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: eadb2f47a3ced5c64b23b90fd2a3463f63726066
CVE-2022-2153: kernel: KVM: NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-03-25T00:00:00+00:00

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.


Affected upstream versions: kernel 5.18
Fixed upstream versions: v5.18
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 7ec37d1cbe17d8189d9562178d8b29167fe1c31a