QID 354081

a vulnerability was found in the linux kernels ebpf verifier when handling internal data structures.
Internal memory locations could be returned to userspace.
a local attacker with the permissions to insert ebpf code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. (
( CVE-2021-4159) a use-after-free flaw was found in the linux kernels atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages.
This flaw allows a local user to crash or potentially escalate their privileges on the system. (
( CVE-2022-1679) in v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation.
This could lead to local escalation of privilege with system execution privileges needed.
User interaction is not needed for exploitation.
Product: androidversions: android kernelandroid id: a-223375145references: upstream kernel (cve-2022-20369) a flaw was found in the linux kernels kvm when attempting to set a synic irq.
This issue makes it possible for a misbehaving vmm to write to synic/stimer msrs, causing a null pointer dereference.
This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service. (
( CVE-2022-2153) a use-after-free flaw was found in nf_tables cross-table in the net/netfilter/nf_tables_api.c function in the linux kernel.
This flaw allows a local, privileged attacker to cause a use-after-free problem at the time of table deletion, possibly leading to local privilege escalation. (

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.