PT-2023-34826 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue is related to the f2fs component, where a panic can be avoided if the extent tree is not created. The actual impact and attack plausibility have not yet been proven...

PT-2023-34777 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: A potential memory leak was identified in the ice gnss tty write function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2023-34919 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.303 Description: The issue concerns the handling of extension header length in rawv6 push pending frames. It was introduced in version v2.6.12 and fixed in version v4.14.303. The actual impact and attack...

PT-2023-34883 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.230 Description: A potential security issue exists in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.4.230, upda...

PT-2023-34755 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to the axi chan handle err function, where exception protection processing for vd is added. The actual impact and attack plausibility have not yet been proven...

PT-2023-34837 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.88 Description: A use-after-free bug was discovered in the dup user cpus ptr function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-34870 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to the memblock free late function, where pages are not always released to the buddy allocator. This could potentially lead to security vulnerabilities, although the...

PT-2023-34745 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v6.1.7 Description: A potential security issue exists due to a possible null pointer dereference in spk ttyio release. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2023-34761 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue concerns the initialization of rx-link and rx-link sta in the mac80211 component of the wifi functionality. The actual impact and potential for attack have not been proven yet...

PT-2023-34834 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, specifically the pn533 driver. It involves waiting for out urb's completion. The actual impact...

PT-2023-16389 · Jefferson · Jefferson

Name of the Vulnerable Software and Affected Versions: jefferson versions prior to 0.4.1 Description: A path traversal issue affects jefferson's JFFS2 filesystem extractor. Attackers can craft malicious JFFS2 files to force jefferson to write outside of the extraction directory. Recommendations:...

PT-2023-34805 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v6.1.6 Description: The issue is related to potential context use-after-free UAF bugs in the drm/i915 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2023-34800 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v2.6.12 through v6.1.6 Description: The issue is related to the handling of extension header length in rawv6 push pending frames. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-34899 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.271 Description: The issue is related to a null pointer dereference when the host dies, potentially leading to a security vulnerability. The actual impact and attack plausibility have not yet been proven...

PT-2023-34775 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to a warning during failed attribute validation in the act mpls component of the Linux Kernel's net/sched module. The actual impact and attack plausibility have not yet...

PT-2023-34875 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to a use-after-free UAF vulnerability in the drm/virtio component. It was introduced in version v4.4 and fixed in version v5.10.164. The actual impact and attack...

PT-2023-34757 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue concerns the xhci component of the Linux Kernel, where an endpoint is not checked for validity before being dereferenced. This could potentially lead to security vulnerabilities,...

PT-2023-34786 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns a swiotlb bounce buffer leak in confidential VM, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2023-34744 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.1.7 through v6.1.8 Description: The issue is related to a potential security vulnerability in the io uring/poll component. It was introduced in version v6.1.7 and fixed in version v6.1.8. The actual impact and attack...

PT-2023-34781 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.1.5 through v6.1.7 Description: A potential NULL dereference issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v6.1.5 through...