Date: Wed, 10 Aug 2022 09:55:59 GMT From: Philip Paeps <philip@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 28b87d1691b5 - main - security/vuxml: add FreeBSD SA-22:10.aio Message-ID: <202208100955.27A9txhQ066807@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by philip: URL: https://cgit.FreeBSD.org/ports/commit/?id=28b87d1691b550fe65664d12f3265acd981dd054 commit 28b87d1691b550fe65664d12f3265acd981dd054 Author: Philip Paeps <philip@FreeBSD.org> AuthorDate: 2022-08-10 09:53:28 +0000 Commit: Philip Paeps <philip@FreeBSD.org> CommitDate: 2022-08-10 09:53:28 +0000 security/vuxml: add FreeBSD SA-22:10.aio --- security/vuxml/vuln-2022.xml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml index bb382f68587b..6729fddef894 100644 --- a/security/vuxml/vuln-2022.xml +++ b/security/vuxml/vuln-2022.xml @@ -1,3 +1,33 @@ + <vuln vid="5ddbe47b-1891-11ed-9b22-002590c1f29c"> + <topic>FreeBSD -- AIO credential reference count leak</topic> + <affects> + <package> + <name>FreeBSD-kernel</name> + <range><ge>13.1</ge><lt>13.1_1</lt></range> + <range><ge>13.0</ge><lt>13.0_12</lt></range> + <range><ge>12.3</ge><lt>12.3_6</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <h1>Problem Description:</h1> + <p>The aio_aqueue function, used by the lio_listio system call, fails + to release a reference to a credential in an error case.</p> + <h1>Impact:</h1> + <p>An attacker may cause the reference count to overflow, leading to a + use after free (UAF).</p> + </body> + </description> + <references> + <cvename>CVE-2022-23090</cvename> + <freebsdsa>SA-22:10.aio</freebsdsa> + </references> + <dates> + <discovery>2022-08-09</discovery> + <entry>2022-08-10</entry> + </dates> + </vuln> + <vuln vid="5028c1ae-1890-11ed-9b22-002590c1f29c"> <topic>FreeBSD -- Out of bound read in elf_note_prpsinfo()</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202208100955.27A9txhQ066807>