PT-2023-34783 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v6.1.6 Description: A memory leak issue was discovered in the msm mdss parse data bus icc path function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2023-34836 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: The issue is related to an overflow before widen in the bitmap ip create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34777 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: A potential memory leak was identified in the ice gnss tty write function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2023-34776 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v6.1.6 Description: The issue is related to a potential security vulnerability in the net/mlx5 module. It involves fixing command stats access after free, which may have security implications. The actual...

PT-2023-34877 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.230 Description: A potential NULL pointer dereference issue exists in the ncm bitrate function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-34850 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: The issue is related to a slab-out-of-bounds error on the RX FIFO buffer in the qcom-geni-serial driver. This problem was introduced in version v5.7 and is fixed in version v5.10.165. The...

PT-2023-34806 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the io uring/poll component. It was introduced in version v6.0 and fixed in version v6.1.7. The actual impact and attack plausibility have not yet been proven...

PT-2023-34849 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: A race condition exists between mounting and unmounting in the gadgetfs of the USB subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34752 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: A use-after-free race condition issue exists in the Linux Kernel, specifically in the fastrpc component for maps. The actual impact and attack plausibility of this issue have not yet been...

PT-2023-34861 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: A potential security issue has been identified in the Linux Kernel, related to the Bluetooth hci qca driver. The actual impact and attack plausibility have not yet been proven...

PT-2023-34750 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: A null pointer dereference issue occurs when the host dies, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2023-34900 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.0 through v4.19.270 Description: A null-deref issue was found in the gsmi get variable function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.0...

PT-2023-34758 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: A potential issue exists where sdata can be NULL during AMPDU start in the mac80211 wifi component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-34905 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.270 Description: A NULL-deref issue was discovered in the init error path of the EFI module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-34848 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.0 through 5.10.164 Description: A null-deref issue was found in the gsmi get variable function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.0 through...

PT-2023-34885 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.230 Description: A general protection fault issue was discovered in the nilfs btree insert function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-15991 · WordPress · Wp Social Widget

Name of the Vulnerable Software and Affected Versions: WP Social Widget versions prior to 2.2.4 Description: The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some shortcode attributes...

PT-2023-19709 · Pdfbook · Pdfbook

Name of the Vulnerable Software and Affected Versions: PdfBook extension versions 2.0.5 and earlier Description: The issue allows command injection via an option. Recommendations: For PdfBook extension versions 2.0.5 and earlier, update to a version after b07b6a64 to resolve the issue...

CVE-2022-39380 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering

Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...

SUSE-SU-2023:0169-1 Security update for xen

This update for xen fixes the following issues: - CVE-2022-23824: Fixed multiple speculative execution issues bnc1205209. Non-security fixes: - Updated to version 4.16.3 bsc1027519...