PT-2023-33390 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.269 Description: The issue concerns a potential skb leak in the greth init rings function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2023-34369 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential security issue has been identified in the Linux Kernel related to the handling of DFR errors in the THR handler on x86/AMD systems. The actual impact and attack plausibility ha...

PT-2023-33087 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue is related to the addition of a sentinel to the quirks table in the PCI mt7621 driver. It was introduced in version v5.5 and fixed in version v6.0.15. The actual impact and attack...

PT-2023-34259 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a use-after-free in btf dump name dups. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33386 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: A bug in the btrfs qgroup inherit function may cause issues due to sleeping from an invalid context. The actual impact and potential for attack have not been proven yet. Recommendations: Fo...

PT-2023-33144 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a race condition that occurs when there is a vmap stack overflow. This problem was introduced in version v5.14 and is fixed in Linux Kernel version v6.0.12. The actua...

Admin account can lose user's collateral

Lines of code Vulnerability details Impact This is high risk because funds can be send to the wrong address. Proof of Concept Tools Used VSCode, Slither Recommended Mitigation Steps Recommend considering the use of msg.sender in completeRedemptions and processRedemption --- The text was updated...

PT-2023-33898 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue is related to extending a file within the last block. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.1...

PT-2023-33528 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v6.0.17 Description: A memory leak issue was discovered in the kexec functionality of the RISC-V architecture in the Linux Kernel. The issue was introduced in version v5.19 and fixed in version v6.0.18. The...

PT-2023-33400 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.6 through 4.19.268 Description: The issue is related to a PCI device reference count leak in the gpio: amd8111 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2023-33147 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a problem with Clang builds in the drm/amdgpu component, which may lead to a blown stack-frame. The actual impact and potential for attack have not been proven yet...

PT-2023-33463 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to the drm/i915/gvt component in the Linux Kernel. It was introduced in version v4.16 and fixed in version v6.0.19. The actual impact and attack plausibility have not ye...

PT-2023-33720 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential null pointer dereference in the cw bat probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2023-33259 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a use-after-free error when reverting the termination table in the net/mlx5e module. The actual impact and attack plausibility have not yet been proven...

PT-2023-33606 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential issue exists in the Linux Kernel, specifically in the lpfc scsi module, where reading the rx monitor from debugfs can cause a hard lockup. The actual impact and attack plausibili...

PT-2023-33579 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to a memory leak in the tpm tis module. It was introduced in version v4.13 and is fixed in Linux Kernel version v6.0.17. The actual impact and attack plausibility have n...

PT-2023-33203 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to an unbalanced fwnode reference count in the mdio device release function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-34172 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a possible use-after-free UAF in the snic tgt create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34270 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to a potential security problem in the cifs component, which could lead to an oops during encryption. The actual impact and attack plausibility have not yet been proven...

PT-2023-33887 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v6.0.15 Description: The issue concerns the lockd component, specifically when unlocking files, where other missing fields are not properly set. This is an automated identification of a potential security...