PT-2023-33189 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.85 Description: The issue is related to discarding preallocation before extending a file with a hole. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33483 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext4 file system, specifically with marking an no delete evicting inode dirty. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-34224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A potential memory leak issue was discovered in the configfs create dir function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33749 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns the serial: amba-pl011, where SBSA UART accessing DMACR register is avoided. This is an automated ID intended to aid in discovery of potential security vulnerabilities. Th...

PT-2023-33232 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a function prototype mismatch in the snd seq expand var event function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2023-33495 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns a locking problem in the pdc iodc print firmware call. The actual impact and potential for attack have not been confirmed. Recommendations: For Linux Kernel versions prior...

PT-2023-18673 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.4.18.1 Description: The issue affects Shopware, an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment without the Sandbox extension, it is possible to refer to PHP functions...

PT-2023-33142 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue concerns handling attempts to delete multipath routes when fib info contains an nh reference. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2023-33399 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.269 Description: The issue is related to a potential security vulnerability in the Bluetooth functionality. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33148 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue provides a little extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2023-33304 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: The issue is related to the use of kzalloc in fbcon prepare logo. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33288 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.24 through 5.10.158 Description: The issue is related to a NULL string after live migration in xen-netfront. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34126 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to resource leaks in the Linux Kernel. It was introduced in version v4.2 and fixed in version v5.15.86. The actual impact and attack plausibility have not yet been...

PT-2023-33191 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33430 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.302 Description: The issue is related to an out of bounds read in the mvneta config rss function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33356 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.227 Description: The issue concerns a shift-out-of-bounds problem in the hid report raw event function. This problem was introduced in version v2.6.20 and fixed in version v5.4.227. The actual impact and...

PT-2023-33224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a possible use-after-free in the memcg write event control function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33584 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to the allocation of a zone buffer in the pstore/zone using GFP ATOMIC. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34034 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the allocation of a zone buffer in the pstore/zone using GFP ATOMIC. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33969 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to a problem with GEM handle creation ref-counting in the drm/panfrost component. The actual impact and potential for attack have not been proven yet. Recommendations:...