March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – APT SideWinder Group Targeting Pakistan – Active IOCs
December 16, 2022
Rewterz Threat Alert – STOP (DJVU) Ransomware – Active IOCs
December 16, 2022
Rewterz Threat Alert – APT SideWinder Group Targeting Pakistan – Active IOCs
December 16, 2022
Rewterz Threat Alert – STOP (DJVU) Ransomware – Active IOCs
December 16, 2022
Severity
Medium
Analysis Summary
CVE-2022-3110 CVSS:6.2
Linux Kernel is vulnerable to a denial of service, caused by lacking check of the return value of rtw_alloc_hwxmits() in _rtw_init_xmit_priv in drivers/staging/r8188eu/core/rtw_xmit.c. A remote attacker could exploit this vulnerability to cause the null pointer dereference, leading to a denial of service.
CVE-2022-3112 CVSS:6.2
Linux Kernel is vulnerable to a denial of service, caused by lacking check of the return value of rtw_alloc_hwxmits() in _rtw_init_xmit_priv in drivers/staging/r8188eu/core/rtw_xmit.c. A remote attacker could exploit this vulnerability to cause the null pointer dereference, leading to a denial of service.
CVE-2022-3112 CVSS:6.2
Linux Kernel is vulnerable to a denial of service, caused by the lack of checking the return value of kvmalloc_array() in netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c l. A local attacker could exploit this vulnerability to cause a null pointer dereference, leading to a denial of service.
CVE-2022-3112 CVSS:6.2
Linux Kernel is vulnerable to a denial of service, caused by the lacking check of return value of kmalloc_array() in uapi_finalize in drivers/infiniband/core/uverbs_uapi.c. A local attacker could exploit this vulnerability to cause a null pointer dereference, leading to a denial of service.
CVE-2022-3104 CVSS:6.2
Linux Kernel is vulnerable to a denial of service, caused by the lacking check of return value of kmalloc() in lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c. A local attacker could exploit this vulnerability to cause a null pointer dereference, leading to a denial of service.
CVE-2022-3106 CVSS:6.2
Linux Kernel is vulnerable to a denial of service, caused by the lacking check of return value of kmalloc() in ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c. A local attacker could exploit this vulnerability to cause a null pointer dereference, leading to a denial of service.
CVE-2022-3111 CVSS:6.2
Linux Kernel is vulnerable to a denial of service, caused by the lacking free of WM8350_IRQ_CHG_FAST_RDY in free_charger_irq() in drivers/power/supply/wm8350_power.c. A local attacker could exploit this vulnerability to cause a null pointer dereference, leading to a denial of service.
Impact
Denial of Service
Indicators Of Compromise
CVE
- CVE-2022-3108
- CVE-2022-3110
- CVE-2022-3112
- CVE-2022-3104
- CVE-2022-3106
- CVE-2022-3111
Affected Vendors
Linux
Affected Products
- Linux Kernel
Remediation
Refer to Linux Kernel GIT Repository for patch, upgrade or suggested workaround information.