GSD-2023-1002188 powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

powerpc/imc-pmu: Fix use of mutex in IRQs disabled section This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1002122 powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

powerpc/imc-pmu: Fix use of mutex in IRQs disabled section This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1002007 powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

powerpc/imc-pmu: Fix use of mutex in IRQs disabled section This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-35083 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns the use of a mutex in an IRQs disabled section within the powerpc/imc-pmu component. The actual impact and potential for attack have not been fully determined...

Critical Vulnerability exposed Reentrancy attack allowing unlimited Fund Withdrawals.

Lines of code Vulnerability details Impact Function register where it transfers a fixed amount of $NOTE tokens 100 $NOTE to the cidFeeWallet address without checking the reentrancy status. An attacker can repeatedly call this function to drain the contract balance...

GSD-2023-1001816 powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

powerpc/imc-pmu: Fix use of mutex in IRQs disabled section This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...

GSD-2023-1001792 powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

powerpc/imc-pmu: Fix use of mutex in IRQs disabled section This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1001759 powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

powerpc/imc-pmu: Fix use of mutex in IRQs disabled section This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1001713 powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

powerpc/imc-pmu: Fix use of mutex in IRQs disabled section This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

PT-2023-34835 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: The issue concerns the use of a mutex in an IRQs disabled section within the powerpc/imc-pmu component. The actual impact and potential for attack have not been fully determined...

PT-2023-34789 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns the use of a mutex in an IRQs disabled section within the powerpc/imc-pmu component. The actual impact and potential for attack have not been proven yet. Recommendations: F...

PT-2023-34868 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue concerns the use of a mutex in an IRQs disabled section within the powerpc/imc-pmu component. The actual impact and potential for attack have not been proven yet. Recommendations...

Reentrancy Vulnerability in _performFinalChecksAndExecuteOrders function

Lines of code Vulnerability details Impact bytes memory accumulator = new bytesAccumulatorDisarmed; and transferitem, execution.offerer, execution.conduitKey, accumulator; The code uses an "accumulator" variable that is used in the transfer function. The accumulator is created using the line byte...

GSD-2023-1000449 remoteproc: imx_dsp_rproc: Add mutex protection for workqueue

remoteproc: imxdsprproc: Add mutex protection for workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33526 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the remoteproc subsystem, specifically the imx dsp rproc module, where a lack of mutex protection for the workqueue could potentially lead to security vulnerabilities. The...

Use reentrancyGuard for safeTransferFrom

Lines of code Vulnerability details Impact A reentrancy guard is a mechanism used to prevent reentrant calls in smart contracts, which can be a security vulnerability. Reentrancy can happen when a malicious contract calls the "safeTransferFrom" function and then calls it again before the first ca...

PT-2025-49757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the ASoC ALSA System on Chip component related to mutex handling in the soc-compress module. Specifically, if the panic on warn setting is enabl...

PT-2025-49714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the handling of request queue quality of service rq qos APIs. Specifically, concurrent access to rq qos without proper synchronization...

Reentranxcy in executeCalls()

Lines of code Vulnerability details Impact The contract first checks that the message sender is authorized and then marks the provided nonce as executed before calling the executeCalls function in CallLib. However, if CallLib.executeCalls calls back into this contract, the executeCalls function...

Oracle Linux 9 : libvirt (ELSA-2022-8003)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8003 advisory. 8.5.0-7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 8.5.0-7 - securityselinux: Dont ignore NVMe disks when setting image label rhbz2121441 8.5.0-6...