PT-2023-34343

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-33865 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns undefined behavior in a bit shift operation related to TTM TT FLAG PRIV POPULATED. The actual impact and potential for attack have not been proven. Recommendations: For...

PT-2023-34591

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.23 through 5.10.162 Description The issue concerns undefined behavior in a bit shift operation within the get default font function in the lib/fonts component. This behavior was introduced in version 2.6.23 and fixed ...

PT-2023-33922

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue concerns undefined behavior in a bit shift operation related to getting the default font in the lib/fonts component. The actual impact and potential for attack have not been confirme...

PT-2023-34606

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-33983

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

WS-2023-0002

"DyeColorIdMap-fromId" did not account for the possibility that it might be given invalid input. This means that an undefined offset error would occur whenever this happened. This code is indirectly called during ""Banner-deserializeCompoundTag""...

CVE-2022-32658

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705059; Issue ID: GN20220705059...

CVE-2022-32659

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066...

CVE-2022-32657

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705042; Issue ID: GN20220705042...

CVE-2022-32658

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705059; Issue ID: GN20220705059...

CVE-2022-32659

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066...

CVE-2022-32659

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066...

CVE-2022-32657

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705042; Issue ID: GN20220705042...

CVE-2022-32659: Improper Handling of Exceptional Conditions

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066...

MediaTek 输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a mishandling in the Wi-Fi driver that could result in undefined behavior, which could lead to a local privilege escalation that requir...

CVE-2022-32658: Improper Handling of Exceptional Conditions

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705059; Issue ID: GN20220705059...

CVE-2022-32658

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705059; Issue ID: GN20220705059...

MediaTek 输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a mishandling in the Wi-Fi driver that could result in undefined behavior, which could lead to a local privilege escalation that requir...

CVE-2022-32657: Improper Handling of Exceptional Conditions

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705042; Issue ID: GN20220705042...