QID 353956

a memory leak flaw was found in the linux kernels dma subsystem, in the way a user calls dma_from_device.
This flaw allows a local user to read random memory from the kernel space. (
( CVE-2022-0854) a use-after-free flaw was found in the linux kernels fuse filesystem in the way a user triggers write().
This flaw allows a local user to gain unauthorized access to data from the fuse filesystem, resulting in privilege escalation. (
( CVE-2022-1011) a vulnerability was found in the pfkey_register function in net/key/af_key.c in the linux kernel.
This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information. (
( CVE-2022-1353) a null pointer dereference flaw was found in the linux kernels x.25 set of standardized network protocols functionality in the way a user terminates their session using a simulated ethernet card and continued usage of this connection.
This flaw allows a local user to crash the system. (
( CVE-2022-1516) perf: fix sys_perf_event_open() race against self (cve-2022-1729) mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the linux kernel through 5.17.1 has a double free. (
( CVE-2022-28389) a double-free flaw was found in the linux kernel in the ems_usb_start_xmit function.
This flaw allows an attacker to create a memory leak and corrupt the underlying data structure by calling free more than once. (
( CVE-2022-28390) improper update of reference count vulnerability in net/sched of linux kernel allows local attacker to cause privilege escalation to root.
This issue affects: linux kernel versions prior to 5.18; version 4.14 and later versions. (
( CVE-2022-30594)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.