4.19.130

DATE	CVE	VULNERABILITY TITLE	RISK
2022-08-29	CVE-2022-1204	Use After Free vulnerability in multiple products A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. local low complexity linux fedoraproject debian CWE-416	5.5
2022-08-29	CVE-2022-2961	Race Condition vulnerability in multiple products A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. local high complexity linux fedoraproject netapp CWE-362	7.0
2022-08-26	CVE-2022-0168	A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. local low complexity linux redhat	4.4
2022-08-26	CVE-2022-0171	Improper Cross-boundary Removal of Sensitive Data vulnerability in multiple products A flaw was found in the Linux kernel. local low complexity linux redhat debian CWE-212	5.5
2022-08-25	CVE-2022-2991	Out-of-bounds Write vulnerability in Linux Kernel A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. local low complexity linux CWE-787	6.7
2022-08-24	CVE-2021-4037	A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. local low complexity linux debian	7.8
2022-08-24	CVE-2021-4155	Incorrect Calculation of Buffer Size vulnerability in Linux Kernel A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. local low complexity linux CWE-131	5.5
2022-08-24	CVE-2021-4159	A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. local low complexity linux redhat debian	4.4
2022-08-24	CVE-2021-4204	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. local low complexity linux debian redhat netapp CWE-119	7.1
2022-08-24	CVE-2022-2978	A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. local low complexity linux debian	7.8