GSD-2023-1001223 perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()

perf/smmuv3: Fix hotplug callback leak in armsmmupmuinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000853 drivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init()

drivers: perf: marvellcn10k: Fix hotplug callback leak in tadpmuinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000852 perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init()

perf/armdmc620: Fix hotplug callback leak in dmc620pmuinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000851 perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()

perf/smmuv3: Fix hotplug callback leak in armsmmupmuinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33930

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a hotplug callback leak in the tad pmu init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2023-34596

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a hotplug callback leak in the arm smmu pmu init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2023-33929 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a hotplug callback leak in the dmc620 pmu init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2023-33928 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a hotplug callback leak in the arm smmu pmu init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34300 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a hotplug callback leak in the arm smmu pmu init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33739 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the removal of cpuhp instance nodes before removing cpuhp states in the coresight trbe component. The actual impact and attack plausibility have not yet been proven...

PT-2023-34597

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.16 through 5.10.162 Description The issue is related to a hotplug callback leak in the dsu pmu init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-34302

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a hotplug callback leak in the dsu pmu init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.16 and fixed ...

PT-2023-33932

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a hotplug callback leak in the dsu pmu init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.16 and fixed i...

PT-2023-34301

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a hotplug callback leak in the dmc620 pmu init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-36794

Уязвимость функции vc4 hdmi handle hotplug модуля drivers/gpu/drm/vc4/vc4 hdmi.c драйвера инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с возникновением взаимной блокировки. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-40727

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s SCSI subsystem, specifically within the qla2xxx driver. A crash can occur during CPU hotplug operations when an I/O abort times out, leading to...

GHSA-QV98-3369-G364 KubeVirt vulnerable to arbitrary file read on host

Impact Users with the permission to create VMIs can construct VMI specs which allow them to read arbitrary files on the host. There are three main attack vectors: 1. Some path fields on the VMI spec were not properly validated and allowed passing in relative paths which would have been mounted in...

Ubuntu: Security Advisory (USN-5299-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-7446

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a missing cpus read lock in the cgroup attach task all function, which can cause a deadlock. This problem is associated with the cpuset attach function and the cp...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2022-2200)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driv...