Veille CVE

Mars 2022

3 CVE sur 7

  1. CVE-2022-0995 7.8 Élevée Exploitée

    kernel · Linux linux kernel · Fedoraproject fedora · Netapp h300e firmware

    An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

  2. CVE-2022-0492 7.8 Élevée Exploitée

    kernel · Netapp h300s firmware · Netapp h410c firmware · Netapp h410s firmware

    A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

  3. CVE-2022-22706 7.8 Élevée Exploitée

    Arm bifrost gpu kernel driver · Arm midgard gpu kernel driver · Arm valhall gpu kernel driver

    Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.