CVE-2023-0266

A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

Needle CVE-2023-0179 exploit This repository contains the e...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-5814-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5814-1 advisory. Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use...

USN-5815-1 linux-bluefield vulnerabilities

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-20421 David Leadbeater...

Moderate: Red Hat Security Advisory: Red Hat OpenShift (Logging Subsystem) security update

An update for Logging Subsystem 5.6.0 is now available for Red Hat OpenShift Container Platform. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

PT-2025-52948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/msm/dpu subsystem where unallocated resources can be returned. Specifically, if a topology requests resources not created by the system, the dpu r...

Ubuntu: Security Advisory (USN-5808-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Null pointer dereference

In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service system crash via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdiscgraft in...

PT-2023-33085

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.14 Description The issue is related to the pinctrl subsystem in the Linux Kernel, specifically with the mediatek driver. It involves starting up with IRQs disabled. The actual impact and potential for attack...

PT-2023-33286 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: The issue concerns a bounds check in the nfc target arrays within the nci component of the NFC subsystem. It was introduced in version v3.4 and fixed in version v5.10.159. The actual impac...

PT-2023-33377 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: A potential issue exists where a null check is missing before removing sysfs attributes in the coretemp component of the hwmon subsystem. The actual impact and attack plausibility have not...

PT-2023-33526 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the remoteproc subsystem, specifically the imx dsp rproc module, where a lack of mutex protection for the workqueue could potentially lead to security vulnerabilities. The...

PT-2023-33155 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a null pointer check in the coretemp component of the hwmon subsystem. It was introduced in version v3.0 and fixed in version v6.0.12. The actual impact and attack...

PT-2023-33593

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 6.0.16 Description A race condition exists between login work and the login thread in the iscsi target of the scsi subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2023-33341 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.228 Description: The issue is related to the pinctrl subsystem in the Linux Kernel, specifically with the mediatek driver. It involves starting up with IRQs disabled. The actual impact and potential for...

PT-2023-33277 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.160 Description: The issue is related to the pinctrl subsystem in the Linux Kernel, specifically with the mediatek driver. It involves starting up with IRQs disabled. The actual impact and potential for...

PT-2023-33305 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: A potential security issue has been identified in the Linux Kernel, related to the ASoC: soc-pcm component. The issue involves a lack of NULL check in BE reparenting. The actual impact and...

PT-2023-33372 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.178 through 5.4.225 Description: The issue concerns a bounds check for sx controls in the ASoC: ops component. It was introduced in version v5.4.178 and fixed in version v5.4.226. The actual impact and attack...

PT-2025-13335

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.33 and later Description A memory leak issue was found in the Linux FireWire subsystem related to the payload of request subaction to IEC 61883-1 FCP region. This issue occurred due to a use-after-free problem, where...

PT-2025-38209

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists when using the debugfs lookup function in the USB subsystem. Failing to call dput on the result of debugfs lookup leads to a memory leak over time. The issue is...