PT-2024-1292

🗓️ 19 Jan 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 14 Views

Linux kernels up to 6.7.1 have an off-by-one error in receive track latency causing out-of-bounds access.

Reporter	Title	Published	Views	Family All 15338
BDU FSTEC	The vulnerability of the nft_limit_eval() function in the net/netfilter/nft_limit.c module of the netfilter component in the Linux operating system allows a hacker to access protected information or cause service failures.	3 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kvm_arch_vcpu_ioctl_set_fpu() function in the arch/s390/kvm/kvm-s390.c module of the S390 platform support for the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.	3 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the __tracing_map_insert() function in the kernel/trace/tracing_map.c module, which supports Linux operating system kernel tracing, allows a hacker to cause a service failure.	3 Dec 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the process_isoc_td() function in the drivers/usb/host/xhci-ring.c module – The USB device driver support module of the Linux operating system allows a hacker to trigger a service failure.	3 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the tcf_block_playback_offloads() function in the net/sched/cls_api.c module of the network/sched subsystem of the Linux operating system allows a hacker to gain access to protected information or cause service failures.	3 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the tipc_nl_bearer_add() function in the net/tipc/bearer.c module of the TIPC protocol implementation in Linux kernel allows a attacker to cause a service failure.	3 Dec 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the rtw_sdio_get_tx_addr() function in the drivers/net/wireless/realtek/rtw88/sdio.c module – The Realtek wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.	3 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the time_travel_update_time() function in the arch/um/kernel/time.c module of the Linux operating system allows a hacker to trigger a service failure.	3 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WMI_TXSTATUS_EVENTID command in the Linux operating system allows a hacker to trigger a service failure.	9 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `nilfs_prepare_segment_for_recovery()` function in the `fs/nilfs2/recovery.c` module of the NILFS2 file system support module for Linux operating systems allows a hacker to cause a service failure.	9 Feb 202600:00	–	bdu_fstec

Source	Link
suse	www.suse.com/security/cve/CVE-2023-52456
ubuntu	www.ubuntu.com/security/CVE-2023-6610
suse	www.suse.com/security/cve/CVE-2023-35827
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-22705
ubuntu	www.ubuntu.com/security/CVE-2023-52491
suse	www.suse.com/security/cve/CVE-2021-46953
ubuntu	www.ubuntu.com/security/CVE-2023-52470
suse	www.suse.com/security/cve/CVE-2021-46964
ubuntu	www.ubuntu.com/security/CVE-2024-26707
ubuntu	www.ubuntu.com/security/CVE-2024-0340

18 Feb 2026 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.15.5 - 9.1

CVSS 27.2

EPSS0.50967

SSVC