OESA-2022-1910

Dashboard / Vulnerabilities / OESA-2022-1910

OESA-2022-1910

Summary: kernel security update

Details: The Linux Kernel, the operating system core itself. Security Fix(es): A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an attacker to crash the system or have other memory-corruption side effects.(CVE-2022-2938) A use-after-free flaw was found in nf_tables cross-table in the net/netfilter/nf_tables_api.c function in the Linux kernel. This flaw allows a local, privileged attacker to cause a use-after-free problem at the time of table deletion, possibly leading to local privilege escalation.(CVE-2022-2586)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1910, https://nvd.nist.gov/vuln/detail/CVE-2022-2938, https://nvd.nist.gov/vuln/detail/CVE-2022-2586