ALINUX2-SA-2022%3A0028

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2019-19057: CVE-2019-19057 kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS CVE-2019-19067: CVE-2019-19067 kernel: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c allow for a DoS CVE-2019-19073: CVE-2019-19073 kernel: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel (DOS) CVE-2019-19074: CVE-2019-19074 kernel: a memory leak in the ath9k management function in allows local DoS CVE-2019-20636: CVE-2019-20636 kernel: out-of-bounds write via crafted keycode table CVE-2020-11608: CVE-2020-11608 kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c CVE-2020-11609: CVE-2020-11609 kernel: NULL pointer dereference due to incorrect handling of invalid descriptors in stv06xx subsystem CVE-2020-11668: CVE-2020-11668 kernel: mishandles invalid descriptors in drivers/media/usb/gspca/xirlink_cit.c CVE-2020-12465: CVE-2020-12465 kernel: buffer overflow in mt76_add_fragment function in drivers/net/wireless/mediatek/mt76/dma.c CVE-2021-4157: CVE-2021-4157 kernel: Buffer overwrite in decode_nfs_fh function CVE-2021-4202: CVE-2021-4202 kernel: Race condition in nci_request() leads to use after free while the device is getting removed CVE-2021-4203: CVE-2021-4203 kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses CVE-2021-45868: CVE-2021-45868 kernel: fs/quota/quota_tree.c does not validate the block number in the quota tree CVE-2022-0330: CVE-2022-0330 kernel: possible privileges escalation due to missing TLB flush CVE-2022-0435: CVE-2022-0435 kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS CVE-2022-0617: CVE-2022-0617 kernel: Null pointer dereference in udf_expand_file_adinicbdue() during writeback CVE-2022-0847: CVE-2022-0847 kernel: improper initialization of the "flags" member of the new pipe_buffer CVE-2022-0886: CVE-2022-0886 kernel: buffer overflow in IPsec ESP transformation code CVE-2022-1353: CVE-2022-1353 Kernel: A kernel-info-leak issue in pfkey_register CVE-2022-1419: CVE-2022-1419 kernel: a concurrency use-after-free in vgem_gem_dumb_create CVE-2022-22942: CVE-2022-22942 kernel: failing usercopy allows for use-after-free exploitation CVE-2022-29581: CVE-2022-29581 kernel: Improper Update of Reference Count vulnerability in net/sched