CVE-2022-23538 User credentials leaked to third-party service via HTTP redirect in scs-library-client

github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services SCS Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectl...

PT-2023-33242 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to the synchronization of EFI page table's kernel mappings before switching. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33091 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to an out of bounds check in the mvneta driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-34172 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a possible use-after-free UAF in the snic tgt create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33764 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a WARNING in the ipr init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v2.6.34 and fixed in Linux Kernel...

PT-2023-33815 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns the HID sensor custom attribute handling. It has been fixed in Linux Kernel version v6.0.16 by a specific commit. Recommendations: For Linux Kernel versions prior to...

PT-2023-33720 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential null pointer dereference in the cw bat probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2023-33147 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a problem with Clang builds in the drm/amdgpu component, which may lead to a blown stack-frame. The actual impact and potential for attack have not been proven yet...

PT-2023-33579 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to a memory leak in the tpm tis module. It was introduced in version v4.13 and is fixed in Linux Kernel version v6.0.17. The actual impact and attack plausibility have n...

PT-2023-34369 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential security issue has been identified in the Linux Kernel related to the handling of DFR errors in the THR handler on x86/AMD systems. The actual impact and attack plausibility ha...

PT-2023-34270 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to a potential security problem in the cifs component, which could lead to an oops during encryption. The actual impact and attack plausibility have not yet been proven...

PT-2023-34259 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a use-after-free in btf dump name dups. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33260 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A buffer overflow issue exists in the elem comparison of cfg80211, a WiFi configuration module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2023-33553 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: A slab-out-of-bounds read issue was discovered in the fs/ntfs3 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2023-33528 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v6.0.17 Description: A memory leak issue was discovered in the kexec functionality of the RISC-V architecture in the Linux Kernel. The issue was introduced in version v5.19 and fixed in version v6.0.18. The...

PT-2023-33284 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.16 through 5.10.158 Description: A potential use-after-free issue was identified in the hix5hd2 rx function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2023-33513 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns a corruption problem that occurs when online resizing a 1K bigalloc file system. The actual impact and potential for attack have not been fully determined. Recommendations...

PT-2023-33265 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a resource leak in the ixgbevf init module function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33377 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: A potential issue exists where a null check is missing before removing sysfs attributes in the coretemp component of the hwmon subsystem. The actual impact and attack plausibility have not...

PT-2023-33504 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a problem with GEM handle creation ref-counting in the drm/panfrost component. The actual impact and potential for attack have not been proven yet. Recommendations: F...