A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4.

A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.

A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw under certain circumstances allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.

A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.

Chromium: CVE-2022-0470 Out of bounds memory access in V8

Chromium: CVE-2022-0469 Use after free in Cast

Chromium: CVE-2022-0468 Use after free in Payments

Chromium: CVE-2022-0467 Inappropriate implementation in Pointer Lock

Chromium: CVE-2022-0466 Inappropriate implementation in Extensions Platform

Chromium: CVE-2022-0465 Use after free in Extensions

Chromium: CVE-2022-0464 Use after free in Accessibility

Chromium: CVE-2022-0463 Use after free in Accessibility

Chromium: CVE-2022-0462 Inappropriate implementation in Scroll

Chromium: CVE-2022-0461 Policy bypass in COOP

Chromium: CVE-2022-0460 Use after free in Window Dialog

Chromium: CVE-2022-0459 Use after free in Screen Capture

Chromium: CVE-2022-0458 Use after free in Thumbnail Tab Strip

Chromium: CVE-2022-0457 Type Confusion in V8