QID 355815

An issue was discovered in the linux kernel before 6.2.
The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c. (
( CVE-2022-48502) an issue in "zen 2" cpus, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. (
( CVE-2023-20593) an out-of-bounds write vulnerability in the linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. the qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. we recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64. (
( CVE-2023-3611) a use-after-free vulnerability in the linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. if tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter().
If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. we recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f. (
( CVE-2023-3776)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.