PT-2023-35397 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.1.13 Description: The issue is related to the mtk eth soc component in the Linux Kernel, specifically concerning an allocation truncation avoidance. The actual impact and attack plausibility have not yet been...

PT-2023-35439 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.94 Description: The issue is related to a missing frame in the stacktrace. It was introduced in version v5.15.24 and fixed in version v5.15.94. The actual impact and attack plausibility have not yet been...

PT-2023-35408 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.12 Description: The issue is related to a missing frame in the stacktrace. It was introduced in version v5.17 and fixed in version v6.1.12. The actual impact and attack plausibility have not yet been proven...

PT-2023-35418 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.95 Description: The issue is related to an off-by-one error in the htb activate prios function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2023-35481 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.232 Description: The issue concerns the use of the WQ MEM RECLAIM flag for workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-35384 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to an underflow in second superblock position calculations in the nilfs2 file system. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-35396 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue concerns a bounds check priority in the Linux Kernel's scheduling component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-35477 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.19 through 5.4.231 Description: The issue is related to a null-deref in mremap after fork. It was introduced in version 3.19 and fixed in version 5.4.232. The actual impact and attack plausibility have not yet been...

PT-2023-35460 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.168 Description: The issue is related to page corruption caused by a racy check in free pages. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-35455 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.169 Description: The issue is related to possible resource leaks in some error paths in the mmc: sdio component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2023-35388 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to possible resource leaks in some error paths in the mmc: sdio component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-35496 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.306 Description: The issue is related to a wrong-direction WARNING in plusb.c. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-35489 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.273 Description: The issue is related to a wrong-direction WARNING in plusb.c. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-35409 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.12 Description: A potential memory leak issue was identified in the ice add adv recipe function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux...

PT-2023-35383 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue concerns a problem with the call usermode helper exec function in relation to SIGKILL signals. The actual impact and potential for attack have not been proven yet. Recommendations:...

PT-2023-35390 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to a null-deref in the mremap function after a fork operation. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-16182 · WordPress · Wp Coder

Name of the Vulnerable Software and Affected Versions: WPCode WordPress plugin versions prior to 2.0.7 Description: The issue arises from inadequate privilege checks for several AJAX actions in the WPCode WordPress plugin, where only the nonce is checked. This may allow any authenticated user who...

PT-2023-16790 · Cockpit · Cockpit

Name of the Vulnerable Software and Affected Versions: cockpit versions prior to 2.4.0 Description: The issue concerns the use of platform-dependent third-party components in the GitHub repository cockpit-hq/cockpit. A patch is available and is anticipated to be part of version 2.4.0...

PT-2023-20661 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.0 Description: The issue allows an attacker to make the farm unusable by adding an object to a page with a huge number, filling the memory allocated to XWiki and making it unusable every time the document i...

PT-2023-20677 · Vega · Vega

Name of the Vulnerable Software and Affected Versions: Vega versions prior to 5.13.1 Description: The Vega scale expression function has the ability to call arbitrary functions with a single controlled argument. This can be exploited to escape the Vega expression sandbox in order to execute...