NetApp SolidFire, Enterprise SDS & HCI Storage Node

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

Published: 2022-05-12T00:00:00.000Z
Updated: 2024-08-03T06:56:13.169Z

Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.

Published: 2022-06-01T00:00:00.000Z
Updated: 2024-08-03T06:40:47.498Z

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.

Published: 2022-04-11T04:15:06.000Z
Updated: 2024-08-03T06:10:56.796Z

jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.

Published: 2022-04-08T04:11:51.000Z
Updated: 2024-08-03T06:03:52.967Z

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

Published: 2022-06-01T00:00:00.000Z
Updated: 2026-05-27T13:18:28.296Z