GSD-2023-1000617 mailbox: zynq-ipi: fix error handling while device_register() fails

mailbox: zynq-ipi: fix error handling while deviceregister fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000380 drm/amdkfd: Fix kfd_process_device_init_vm error handling

drm/amdkfd: Fix kfdprocessdeviceinitvm error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000257 iavf: Fix error handling in iavf_init_module()

iavf: Fix error handling in iavfinitmodule This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.158 by commit...

GSD-2023-1000256 fm10k: Fix error handling in fm10k_init_module()

fm10k: Fix error handling in fm10kinitmodule This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.158 by commit...

GSD-2023-1000187 fm10k: Fix error handling in fm10k_init_module()

fm10k: Fix error handling in fm10kinitmodule This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000186 iavf: Fix error handling in iavf_init_module()

iavf: Fix error handling in iavfinitmodule This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000097 fm10k: Fix error handling in fm10k_init_module()

fm10k: Fix error handling in fm10kinitmodule This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

PT-2023-33263 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue concerns error handling in the iavf init module function. It was introduced in version v4.6 and fixed in version v5.15.82. The actual impact and attack plausibility have not yet...

PT-2023-33174 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue concerns error handling in the fm10k init module function. It was introduced in version v3.18 and fixed in Linux Kernel version v6.0.12. The actual impact and attack plausibility...

PT-2023-33787 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns error handling in the hci register dev function. It was introduced in version v5.7 and fixed in version v6.0.16. The actual impact and attack plausibility have not yet bee...

PT-2023-33731 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns error handling in the cdev device add function. It was introduced in version v4.12 and is fixed in Linux Kernel version v6.0.16. The actual impact and attack plausibility...

PT-2023-33748 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns error handling in the sunsab init function. It was introduced in version v2.6.18 and fixed in version v6.0.16. The actual impact and attack plausibility have not yet been...

PT-2023-33457 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to error handling in the kfd process device init vm function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33334 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue concerns error handling in the iavf init module function. It was introduced in version v4.6 and fixed in version v5.10.158. The actual impact and attack plausibility have not yet...

PT-2023-33173 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue concerns error handling in the iavf init module function. It was introduced in version v4.6 and fixed in version v6.0.12. The actual impact and attack plausibility have not yet bee...

PT-2023-33264 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue concerns error handling in the fm10k init module function. It was introduced in version v3.18 and is fixed in Linux Kernel version v5.15.82. The actual impact and attack...

PT-2023-34284 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue concerns error handling in the cros usbpd notify init function. It was introduced in version v5.7 and fixed in version v5.15.86. The actual impact and attack plausibility have not...

PT-2023-33694 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns error handling in the zynq-ipi mailbox when the device register function fails. The actual impact and potential for attack have not been proven yet. Recommendations: For...

Information Disclosure

pghero is vulnerable to Information Disclosure. The vulnerability exists because the explain function in homecontroller.rb does not properly handle sensitive information in the error message of query results, allowing an attacker to access sensitive information...

The gotcha of unhandled promise rejections

Let's say you wanted to display a bunch of chapters on the page, and for whatever reason, the API only gives you a chapter at a time. You could do this: async function showChapterschapterURLs for const url of chapterURLs const response = await fetchurl; const chapterData = await response.json;...