QID 354071

an out-of-bounds write flaw was found in the linux kernel’s framebuffer-based console driver functionality in the way a user triggers ioctl fbioput_vscreeninfo with malicious data.
This flaw allows a local user to crash or potentially escalate their privileges on the system. (
( CVE-2021-33655) a vulnerability was found in the linux kernels ebpf verifier when handling internal data structures.
Internal memory locations could be returned to userspace.
a local attacker with the permissions to insert ebpf code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. (
( CVE-2021-4159) an out-of-bounds read flaw was found in the linux kernels teletype subsystem.
The issue occurs in how a user triggers a race condition using ioctls tiocsptlck and tiocgptpeer and tiocsti and tcxonc with leakage of memory in the flush_to_ldisc function.
This flaw allows a local user to crash the system or read unauthorized random data from memory. (
( CVE-2022-1462) a use-after-free flaw was found in the linux kernels atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages.
( CVE-2022-1679) a flaw was found in the linux kernels kvm when attempting to set a synic irq.
This issue makes it possible for a misbehaving vmm to write to synic/stimer msrs, causing a null pointer dereference.
This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service. (
This flaw allows a remote user to gain unauthorized access to the system. (
( CVE-2022-40307)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.