GSD-2023-1000010 PCI: mt7621: Add sentinel to quirks table

PCI: mt7621: Add sentinel to quirks table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.15 by commit...

Web skimmer found on website of Liquor Control Board of Ontario

On January 12, 2023, the Liquor Control Board of Ontario LCBO published a news release about a cybersecurity incident, affecting online sales through LCBO.com. It is one of the largest retailers and wholesalers of beverage alcohol in the world. Web skimmer The cybersecurity incident was a web...

PT-2023-33156 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a pci device refcount leak in the nv1a ram new function. This problem was introduced in version v3.14 and is fixed in Linux Kernel version v6.0.12. The actual impact...

PT-2023-33143 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a PCI device refcount leak in the has external pci function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33238 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A potential security issue exists due to a PCI device refcount leak in the has external pci function. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2023-33354 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.227 Description: The issue is related to a PCI device reference count leak in the gpio: amd8111 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34542 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential security issue exists due to a pci device refcount leak in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33145 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.15...

PT-2023-33444 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: The issue is related to a pci device refcount leak in the nv1a ram new function. This problem was introduced in version v3.14 and is fixed in Linux Kernel version v4.14.301. The actual...

PT-2023-33432 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.302 Description: The issue is related to a PCI device reference count leak in the amd8111 gpio driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33213 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a PCI device reference count leak in the gpio: amd8111 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33968 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the pci device is present function, specifically with Virtual Functions VFs by checking the Physical Function PF. The actual impact and attack plausibility have not...

PT-2023-33376 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.14 through 5.4.225 Description: The issue is related to a pci device refcount leak in the nv1a ram new function. This problem was introduced in version v3.14 and is fixed in Linux Kernel version v5.4.226. The actual...

PT-2023-33400 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.6 through 4.19.268 Description: The issue is related to a PCI device reference count leak in the gpio: amd8111 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2023-33530 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A double free issue in the error path of PCI/sysfs has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-33111 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to a PCI device reference count leak in the gpio: amd8111 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34045 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the nvme-pci module in the Linux Kernel. It was introduced in version v4.18 and fixed in version v5.15.87. The actual impact and attack plausibility have not yet bee...

PT-2023-34169 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A potential security issue exists due to a PCI device refcount leak in the hwrng: geode component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33236 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33313 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.15 through 5.10.157 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...