PT-2023-33945

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...

PT-2023-33472

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.19 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...

PT-2023-33148 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue provides a little extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2023-33243 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue provides a little extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2023-34313

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...

PT-2023-33314 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue provides extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33410 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.268 Description: The issue provides a little extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2025-53207

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the hfs/hfsplus component. A previous fix introduced a warning WARN ON triggered by a corrupted HFS image, as reported by syzbot. The issue is...

PT-2025-13317

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the transmission of isotp PDUs. The issue arose from a single timer handling two functions: sending consecutive frames...

reactor-netty-http: Log request headers in some cases of invalid HTTP requests

A flaw was found in the Reactor Netty HTTP Server, which may log request headers in some cases of invalid HTTP requests. This could allow an attacker to access privileged information when WARN level logging is enabled...

kernel: net: preserve skb_end_offset() in skb_unclone_keeptruesize()

In the Linux kernel, the following vulnerability has been resolved: net: preserve skbendoffset in skbunclonekeeptruesize syzbot found another way to trigger the infamous WARNONONCEdelta truesize value, we also need to make sure TCP wont fill new tailroom that pskbexpandhead was able to get from a...

kernel: exec: Force single empty string when argv is empty

In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: "In several other operating systems, it is a hard requirement that the second argument to execve2 be the name of a program, thus prohibiting a scenario...

PT-2022-35877

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v4.9.332 Linux Kernel versions prior to v4.9.332 Description The issue is related to a switch from WARN to pr warn in openvswitch. The actual impact and attack plausibility have not yet been proven. Recommendation...

CVE-2022-31684

A flaw was found in the Reactor Netty HTTP Server, which may log request headers in some cases of invalid HTTP requests. This could allow an attacker to access privileged information when WARN level logging is enabled...

GHSA-7W4X-4H67-PGMV Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens

Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may request log headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled...

Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens

Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may request log headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled...

PT-2022-20889

Name of the Vulnerable Software and Affected Versions Reactor Netty HTTP Server versions 1.0.11 through 1.0.23 Description The issue affects the logging of request headers in cases of invalid HTTP requests. When logging at WARN level is enabled, the logged headers may reveal valid access tokens t...

CVE-2022-31684

Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled...

PT-2025-41024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the nilfs2 filesystem within the Linux kernel. When creating or finalizing a checkpoint, failures due to anomalies in checkpoint metadata on disk previously generated...

GSD-2022-1003455 KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2

KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.45 by commit...