QID 354084

a use-after-free flaw was found in the linux kernels atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages.
This flaw allows a local user to crash or potentially escalate their privileges on the system. (
( CVE-2022-1679) a flaw was found in the linux kernels kvm when attempting to set a synic irq.
This issue makes it possible for a misbehaving vmm to write to synic/stimer msrs, causing a null pointer dereference.
This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service. (
( CVE-2022-2153) a use-after-free flaw was found in the linux kernels posix cpu timers functionality in the way a user creates and then deletes the timer in the non-leader thread of the program.
( CVE-2022-2585) a use-after-free flaw was found in nf_tables cross-table in the net/netfilter/nf_tables_api.c function in the linux kernel.
This flaw allows a local, privileged attacker to cause a use-after-free problem at the time of table deletion, possibly leading to local privilege escalation. (
( CVE-2022-2586) a use-after-free flaw was found in route4_change in the net/sched/cls_route.c filter implementation in the linux kernel.
This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem. (
( CVE-2022-2588) a flaw was found in hw.
( CVE-2022-26373) a firewall flaw that can bypass the linux kernels netfilter functionality was found in how a user handles unencrypted irc with nf_conntrack_irc configured.
This flaw allows a remote user to gain unauthorized access to the system. (

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.