Aggregator

A vulnerability was found in Linux Kernel up to 5.15.62/5.19.1. It has been classified as problematic. This affects the function cdns3_allocate_trb_pool of the component usb. The manipulation leads to allocation of resources. This vulnerability is uniquely identified as CVE-2022-50151. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.15.60/5.18.17/5.19.1 and classified as problematic. Affected by this issue is the function get_nodes of the component mempolicy. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2022-50147. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.15.60/5.18.17/5.19.1 and classified as critical. Affected by this vulnerability is the function mtk_pcie_init_irq_domains of the component PCI. The manipulation leads to improper update of reference count. This vulnerability is known as CVE-2022-50154. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.10.136/5.15.60/5.18.17/5.19.1. Affected is the function device_prep_dma_memcpy of the file /sys/module/dmatest/parameters/threads_per_chan. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2022-50145. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.19.1. This issue affects the function cp2112_xfer of the file drivers/hid/hid-cp2112.c of the component HID. The manipulation of the argument read_length leads to buffer overflow. The identification of this vulnerability is CVE-2022-50156. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.19.1. This vulnerability affects the function of_find_compatible_node of the component usb. The manipulation leads to improper update of reference count. This vulnerability was named CVE-2022-50153. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.18.17/5.19.1. This affects the function __kernfs_remove of the file fs/kernfs/dir.c of the component kernfs. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2022-50148. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.19.1. It has been rated as critical. Affected by this issue is the function of_parse_phandle of the component usb. The manipulation leads to improper update of reference count. This vulnerability is handled as CVE-2022-50152. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.19.1. It has been declared as critical. Affected by this vulnerability is the function rxe_create_qp of the component qp_init. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2022-50135. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.10.136/5.15.60/5.18.17/5.19.1. It has been classified as critical. Affected is the function ast_vhub_init_desc of the component usb. The manipulation leads to improper update of reference count. This vulnerability is traded as CVE-2022-50139. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

2 luchtmachtmilitairen hebben vandaag een dapperheidsonderscheiding ontvangen. Na gevaarlijke activiteiten tijdens missies is er vele jaren later erkenning. Adjudant Paul nam een Bronzen Kruis in ontvangst, kapitein-vlieger Michiel kreeg een Vliegerkruis. Wat minister Ruben Brekelmans betreft verdienden beiden militairen al veel eerder erkenning.

A vulnerability was found in Linux Kernel up to 5.4.210/5.10.136/5.15.60/5.18.17/5.19.1 and classified as problematic. This issue affects the function IW_CM_EVENT_CONNECT_REPLY of the component RDMA. The manipulation leads to privilege escalation. The identification of this vulnerability is CVE-2022-50136. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.10.136/5.15.60/5.18.17/5.19.1 and classified as critical. This vulnerability affects the function cdns3_gadget_ep_dequeue of the component usb. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2022-50132. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.19.1. This affects the function of_find_matching_node of the component mmc. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2022-50141. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.10.136/5.15.60/5.18.17/5.19.1. Affected by this issue is the function __qedr_alloc_mr of the component RDMA. The manipulation leads to memory leak. This vulnerability is handled as CVE-2022-50138. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.10.136/5.15.60/5.18.17/5.19.1. Affected by this vulnerability is the function mcp_smbus_write of the file drivers/hid/hid-mcp2221.c of the component HID. The manipulation of the argument len leads to buffer overflow. This vulnerability is known as CVE-2022-50131. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.19.1. Affected is the function bitmap_free. The manipulation leads to memory leak. This vulnerability is traded as CVE-2022-50140. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A recent vulnerability has been discovered in the Zyxel NWA50AX Pro, a WiFi 6 access point for small businesses, exposing it to an n-day flaw that allows arbitrary file deletion via a misconfigured CGI endpoint. This issue, tracked as CVE-2024-29974, highlights the risks of shared codebases and incomplete patching in embedded devices. Discovery and Technical […]

The post Zyxel NWA50AX Pro Hit by N-Day Flaw Allowing Arbitrary File Deletion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.