PT-2023-33365 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.227 Description: A potential security issue has been identified in the Linux Kernel, related to the ASoC: soc-pcm component. The actual impact and attack plausibility have not yet been proven...

PT-2023-33938 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to a crash caused by a flush request when blktrace is enabled, potentially affecting the nvme module. The actual impact and attack plausibility have not yet been proven...

PT-2023-33154 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to the asus-ec-sensors component in the Linux Kernel, specifically with the devm kcalloc function. The actual impact and attack plausibility have not yet been proven...

PT-2023-33350 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.24 through 5.4.226 Description: The issue is related to a potential security problem in the xen-netfront component. It was introduced in version v2.6.24 and fixed in version v5.4.227. The actual impact and attack...

PT-2023-34093 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to the bpf component in the Linux Kernel, specifically when redirecting to a tunneling device. It ensures that skb-len is not equal to 0. The actual impact and attack...

PT-2023-33087 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue is related to the addition of a sentinel to the quirks table in the PCI mt7621 driver. It was introduced in version v5.5 and fixed in version v6.0.15. The actual impact and attack...

PT-2023-33860 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to preventing signed BPG offsets from bleeding into adjacent bits in the drm/msm/dsi component. The actual impact and attack plausibility have not yet been proven...

PT-2023-33115 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v6.0.12 Description: The issue concerns a NULL pointer dereference in the can rcv filter function. This problem was introduced in version v5.12 and is fixed in version v6.0.13. The actual impact and potenti...

PT-2023-33566 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the initialization process in the cpufreq component, where the completion of initialization occurs before the kobject init and add function is called. This problem wa...

PT-2023-34172 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a possible use-after-free UAF in the snic tgt create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33374 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: The issue provides a little extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2023-34393 · Libbpf · Libbpf

Name of the Vulnerable Software and Affected Versions: libbpf versions prior to v5.10.163 Description: The issue concerns enum forward-declarations in the public API when libbpf is used in C++ mode. It has been fixed in Linux Kernel version v5.10.163. Recommendations: For versions prior to...

PT-2023-33501 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to the VF promisc mode not being updated when the mac table is full. This problem was introduced in version v5.14 and is fixed in Linux Kernel version v6.0.19. The actua...

GSD-2022-1007900 net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start()

net: microchip: sparx5: Fix potential null-ptr-deref in sparxstatsinit and sparx5start This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 ...

GSD-2022-1007881 kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case

kprobes: Skip clearing aggrprobe's posthandler in kprobe-on-ftrace case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

PT-2022-35962 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to the blk-cgroup in the Linux Kernel, where the parent is not properly pinned in blkcg css online. The actual impact and attack plausibility have not yet been proven...

PT-2022-36012 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: A potential memory leak issue was identified in the 'add widget node' function of the ALSA hda module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-36286 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue concerns an invalid length check when fetching device IDs. This problem was introduced in version v5.3 and is fixed in version v5.10.156. The actual impact and attack plausibilit...

PT-2022-36063 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to the ext4 file system, where a directory entry with an invalid rec len can trigger a BUG ON condition. The actual impact and potential for exploitation have not been...

PT-2022-36571 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.299 Description: The issue is related to ulist leaks in error paths of qgroup self tests in the btrfs filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations: For...