QID 354082

a use-after-free flaw was found in the linux kernels atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages.
This flaw allows a local user to crash or potentially escalate their privileges on the system. (
( CVE-2022-1679) a use-after-free flaw was found in the linux kernels posix cpu timers functionality in the way a user creates and then deletes the timer in the non-leader thread of the program.
( CVE-2022-2585) a use-after-free flaw was found in nf_tables cross-table in the net/netfilter/nf_tables_api.c function in the linux kernel.
This flaw allows a local, privileged attacker to cause a use-after-free problem at the time of table deletion, possibly leading to local privilege escalation. (
( CVE-2022-2586) a use-after-free flaw was found in route4_change in the net/sched/cls_route.c filter implementation in the linux kernel.
This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem. (
( CVE-2022-2588) a flaw was found in hw.
In certain processors with intels enhanced indirect branch restricted speculation (eibrs) capabilities, soon after vm exit or ibpb command event, the linear address following the most recent near call instruction prior to a vm exit may be used as the return stack buffer (rsb) prediction. (
( CVE-2022-26373) a firewall flaw that can bypass the linux kernels netfilter functionality was found in how a user handles unencrypted irc with nf_conntrack_irc configured.
This flaw allows a remote user to gain unauthorized access to the system. (
This flaw allows a local user to gain unauthorized access to data. (
( CVE-2022-40307)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.