GSD-2023-1000021 net: mdio: fix unbalanced fwnode reference count in mdio_device_release()

net: mdio: fix unbalanced fwnode reference count in mdiodevicerelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

PT-2023-34391

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A potential security issue exists due to a use count leakage when handling boot-on. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-34583

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A reference count leak was found in the uncore imc init box function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-33251 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to an unbalanced node reference count in the mdiobus component. It was introduced in version v5.14 and fixed in version v5.15.82. The actual impact and attack...

PT-2023-33203 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to an unbalanced fwnode reference count in the mdio device release function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33213 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a PCI device reference count leak in the gpio: amd8111 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33914 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a reference count leak in the snr uncore mmio map function. It was introduced in version v5.3 and fixed in version v6.0.16. The actual impact and attack plausibility...

PT-2023-34336 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to a use-after-free UAF problem due to reference count races when releasing resources. The actual impact and potential for attack have not been fully determined...

PT-2023-33916

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a reference count leak in the sad cfg iio topology function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2023-34288

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A reference count leak was discovered in the sad cfg iio topology function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2023-33161 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to an unbalanced node reference count in the mdiobus component. It was introduced in version v5.14 and fixed in version v6.0.12. The actual impact and attack plausibilit...

PT-2023-33913

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a reference count leak in the uncore imc init box function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2023-33915

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a reference count leak in the hswep has limit sbox function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2023-34584

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A reference count leak was discovered in the snr uncore mmio map function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2023-34585

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.33 through 5.10.162 Description A reference count leak was discovered in the hswep has limit sbox function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux...

PT-2023-34286

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A reference count leak was discovered in the snr uncore mmio map function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2023-33971

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to a use-after-free UAF problem due to reference count races when releasing resources. The actual impact and potential for attack have not been fully determined...

PT-2023-34287 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.15.85 Description: The issue is related to a reference count leak in the hswep has limit sbox function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2023-33617 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a use count leakage when handling boot-on, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2023-33432 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.302 Description: The issue is related to a PCI device reference count leak in the amd8111 gpio driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...