11335 matches found
GSD-2023-1000274 Bluetooth: Fix not cleanup led when bt_init fails
Bluetooth: Fix not cleanup led when btinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.227 by commit...
GSD-2023-1000212 Bluetooth: Fix not cleanup led when bt_init fails
Bluetooth: Fix not cleanup led when btinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.159 by commit...
PT-2023-34483
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a problem where sysfs is not properly cleaned up when device initialization fails. This problem was introduced in version v4.6 and is fixed in version v5.10.163. The...
PT-2023-34679
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to a problem where sysfs is not properly cleaned up when device initialization fails. This problem was introduced in version v4.6 and is fixed in version v4.9.337. The...
PT-2023-34321
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the initialization of quotas for 'old.inode' in the 'ext4 rename' function. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2023-34170
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a problem where sysfs is not properly cleaned up when device initialization fails. This problem was introduced in version v4.6 and is fixed in version v5.15.86. The...
PT-2023-33759
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a problem where sysfs is not properly cleaned up when device initialization fails. This problem was introduced in version v4.6 and is fixed in version v6.0.16. The actu...
PT-2023-33521 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the initialization of fsdata in the pagecache write function in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven...
PT-2023-34018 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the initialization process in the cpufreq component, where the kobject init and add function is called after the initialization is completed. This problem was...
PT-2023-33352 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.19 through 5.4.226 Description: The issue is related to a missing INIT LIST HEAD in the ieee802154 if add function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2023-33566 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the initialization process in the cpufreq component, where the completion of initialization occurs before the kobject init and add function is called. This problem wa...
PT-2023-34344
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the initialization of fsdata in the pagecache write function in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven. Recommendatio...
PT-2023-34008
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to the validation of the index root when initializing NTFS security in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendatio...
Design/Logic Flaw
DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...
CVE-2022-42285
DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...
CVE-2022-42285
DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...
libreoffice: Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password
A flaw was found in LibreOffice, where the required initialization vector for encryption was always the same. Stored passwords are encrypted with a single master key provided by the user. This issue weakens the security of the encryption, making them vulnerable if an attacker has access to the...
CVE-2021-26407
A randomly generated Initialization Vector IV may lead to a collision of IVs with the same key potentially resulting in information disclosure...