PT-2023-33224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a possible use-after-free in the memcg write event control function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33584 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to the allocation of a zone buffer in the pstore/zone using GFP ATOMIC. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34382 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue concerns a fix in the return type of certain functions, specifically sti dvo connector mode valid, sti hda connector mode valid, and sti hdmi connector mode valid. The actual...

PT-2023-19097 · Impatient · Impatient

Name of the Vulnerable Software and Affected Versions: IMPatienT versions prior to 1.5.2 Description: The issue allows stored XSS via onmouseover in certain text fields within a "PATCH /modify onto" request to the ontology builder. This may allow attackers to steal Protected Health Information...

PT-2023-33519 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the ext4 journal inode having an encrypt flag. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33214 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.81 through v5.15.82 Description: The issue is related to a data race in the netfilter ctnetlink component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33308 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: The issue is related to the no-MMU ZERO PAGE implementation in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to...

PT-2023-33185 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.85 Description: The issue concerns a problem with preallocation discarding at indirect extent boundary. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33237 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue concerns an attempt to delete a multipath route when the fib info contains an nh reference. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2023-34038 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a kmemleak in the orangefs kernel debug init and orangefs client debug init functions. The actual impact and attack plausibility have not yet been proven...

PT-2023-33457 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to error handling in the kfd process device init vm function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33206 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: A refcount leak was discovered in the rockchip gpiolib register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2023-33516 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A potential security issue exists where the ext4 file system does not properly set up an encryption key during a jbd2 transaction. The actual impact and attack plausibility have not yet been...

PT-2023-33313 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.15 through 5.10.157 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33413 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.268 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2023-33370 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.15 through 5.4.225 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33161 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to an unbalanced node reference count in the mdiobus component. It was introduced in version v5.14 and fixed in version v6.0.12. The actual impact and attack plausibilit...

PT-2023-33933 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue concerns the initialization of mailbox messages for VF reset. It was introduced in version v4.0 and fixed in version v6.0.15. The actual impact and attack plausibility have not yet...

PT-2023-33117 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to an array index out of bound error in DCN32 DML. This problem has been identified but its actual impact and potential for exploitation have not been confirmed...

PT-2023-34316 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to the ext4 file system, specifically in the ext4 get branch function. It involves an error code return to user-space. The actual impact and attack plausibility have n...