CVE-2022-46505: Improper Initialization

An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data...

GSD-2023-1000941 cpufreq: Init completion before kobject_init_and_add()

cpufreq: Init completion before kobjectinitandadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000322 Bluetooth: Fix not cleanup led when bt_init fails

Bluetooth: Fix not cleanup led when btinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.269 by commit...

GSD-2023-1000274 Bluetooth: Fix not cleanup led when bt_init fails

Bluetooth: Fix not cleanup led when btinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.227 by commit...

GSD-2023-1000212 Bluetooth: Fix not cleanup led when bt_init fails

Bluetooth: Fix not cleanup led when btinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.159 by commit...

PT-2023-34483

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a problem where sysfs is not properly cleaned up when device initialization fails. This problem was introduced in version v4.6 and is fixed in version v5.10.163. The...

PT-2023-34321

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the initialization of quotas for 'old.inode' in the 'ext4 rename' function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2023-33352 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.19 through 5.4.226 Description: The issue is related to a missing INIT LIST HEAD in the ieee802154 if add function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33521 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the initialization of fsdata in the pagecache write function in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven...

PT-2023-34018 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the initialization process in the cpufreq component, where the kobject init and add function is called after the initialization is completed. This problem was...

PT-2023-34679

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to a problem where sysfs is not properly cleaned up when device initialization fails. This problem was introduced in version v4.6 and is fixed in version v4.9.337. The...

PT-2023-34170

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a problem where sysfs is not properly cleaned up when device initialization fails. This problem was introduced in version v4.6 and is fixed in version v5.15.86. The...

PT-2023-34008

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to the validation of the index root when initializing NTFS security in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2023-33759

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a problem where sysfs is not properly cleaned up when device initialization fails. This problem was introduced in version v4.6 and is fixed in version v6.0.16. The actu...

PT-2023-34344

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the initialization of fsdata in the pagecache write function in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2023-33566 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the initialization process in the cpufreq component, where the completion of initialization occurs before the kobject init and add function is called. This problem wa...

Design/Logic Flaw

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...

CVE-2022-42285

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...

CVE-2022-42285

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...

libreoffice: Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password

A flaw was found in LibreOffice, where the required initialization vector for encryption was always the same. Stored passwords are encrypted with a single master key provided by the user. This issue weakens the security of the encryption, making them vulnerable if an attacker has access to the...