QID 354053

a use-after-free flaw was found in the linux kernels atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages.
This flaw allows a local user to crash or potentially escalate their privileges on the system. (
( CVE-2022-1679) a flaw was found in the linux kernels kvm when attempting to set a synic irq.
This issue makes it possible for a misbehaving vmm to write to synic/stimer msrs, causing a null pointer dereference.
This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service. (
( CVE-2022-2153) a use-after-free flaw was found in route4_change in the net/sched/cls_route.c filter implementation in the linux kernel.
This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem. (
( CVE-2022-2588) a flaw was found in hw.
In certain processors with intels enhanced indirect branch restricted speculation (eibrs) capabilities, soon after vm exit or ibpb command event, the linear address following the most recent near call instruction prior to a vm exit may be used as the return stack buffer (rsb) prediction. (
( CVE-2022-26373) a flaw was found in libtiffs tiffcrop tool that has a uint32_t underflow, which leads to an out-of-bounds read and write in the extractcontigsamples8bits routine.
This flaw allows an attacker who supplies a crafted file to tiffcrop to trick a user into opening the crafted file with tiffcrop, causing a crash or potential further exploitations. (
( CVE-2022-2869) a flaw was found in hw.
( CVE-2022-36946)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.