PT-2023-35419 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.95 Description: A potential security issue exists in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.95, upda...

PT-2023-35403 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.12 Description: The issue is related to a potential security vulnerability in the powerpc/64s/interrupt handling. It involves a race condition with security mitigation switch during interrupt exit. The actu...

PT-2023-35460 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.168 Description: The issue is related to page corruption caused by a racy check in free pages. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-35439 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.94 Description: The issue is related to a missing frame in the stacktrace. It was introduced in version v5.15.24 and fixed in version v5.15.94. The actual impact and attack plausibility have not yet been...

PT-2023-35496 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.306 Description: The issue is related to a wrong-direction WARNING in plusb.c. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-35397 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.1.13 Description: The issue is related to the mtk eth soc component in the Linux Kernel, specifically concerning an allocation truncation avoidance. The actual impact and attack plausibility have not yet been...

PT-2023-35408 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.12 Description: The issue is related to a missing frame in the stacktrace. It was introduced in version v5.17 and fixed in version v6.1.12. The actual impact and attack plausibility have not yet been proven...

PT-2023-35481 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.232 Description: The issue concerns the use of the WQ MEM RECLAIM flag for workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-35417 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.95 Description: A potential issue in the ASoC: SOF: Intel: hda-dai component may lead to a stream tag leak. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-11836 · WordPress · Jetbackup

Name of the Vulnerable Software and Affected Versions: JetBackup – WP Backup, Migrate & Restore plugin for WordPress versions up to, and including 1.3.9 Description: The issue is due to missing nonce validation on the backup guard get import backup function, making it possible for unauthenticated...

PT-2023-35384 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to an underflow in second superblock position calculations in the nilfs2 file system. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-35447 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.169 Description: The issue is related to an off-by-one error in the htb activate prios function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2023-35386 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.2 through v6.1.12 Description: The issue is related to a use-after-free in the ep remove wait queue function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-35455 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.169 Description: The issue is related to possible resource leaks in some error paths in the mmc: sdio component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2023-35489 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.273 Description: The issue is related to a wrong-direction WARNING in plusb.c. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

Use of strict condition can be manipulated

Lines of code Vulnerability details Impact The use of strict condition can be manipulated by attackers, which can lead to unforeseen consequences. Use = and = instead. Proof of Concept Tools Used Manual review Recommended Mitigation Steps Use loose condition instead like = and = instead. --- The...

PT-2023-35383 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue concerns a problem with the call usermode helper exec function in relation to SIGKILL signals. The actual impact and potential for attack have not been proven yet. Recommendations:...

PT-2023-35409 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.12 Description: A potential memory leak issue was identified in the ice add adv recipe function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux...

PT-2023-35390 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to a null-deref in the mremap function after a fork operation. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-20495 · Nestjs · @Nestjs/Core

Name of the Vulnerable Software and Affected Versions: @nestjs/core versions prior to 9.0.5 Description: The issue allows for Information Exposure via the StreamableFile pipe. This can be exploited when a client cancels a request while streaming a StreamableFile, resulting in the stream wrapped b...