PT-2023-35030 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.1.5 through v6.1.7 Description: The issue is related to the use of GFP KERNEL in an atomic context, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2023-35045 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to a null pointer dereference when the host dies, potentially leading to a security vulnerability. The actual impact and attack plausibility have not yet been proven...

Ubuntu 16.04 ESM : Apache HTTP Server vulnerability (USN-5839-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5839-2 advisory. USN-5839-1 fixed a vulnerability in Apache. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...

GSD-2023-1001828 f2fs: let's avoid panic if extent_tree is not created

f2fs: let's avoid panic if extenttree is not created This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.271 by commit...

PT-2023-34890 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.229 Description: A potential security issue exists due to a warning during failed attribute validation in the act mpls component of the Linux Kernel's net/sched module. The actual impact and attack...

mingw-expat security update

An update for mingw-expat is now available for Rocky Linux 8. Rocky Enterprise Software Foundation Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

podman security and bug fix update

An update for podman is now available for Rocky Linux 9. Rocky Enterprise Software Foundation Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

buildah security and bug fix update

An update for buildah is now available for Rocky Linux 9. Rocky Enterprise Software Foundation Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

openssl security and bug fix update

An update for openssl is now available for Rocky Linux 9. Rocky Enterprise Software Foundation Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

The _verifySignature function skips signature verification if the offerer is the caller.

Lines of code Vulnerability details Impact it could have a significant impact on the security of the smart contract. The function is intended to verify the signature of an order, but if the offerer is the caller, the function skips the signature verification. This could allow someone other than t...

CVE-2023-21825

CVE-2023-21825 affects Oracle E-Business Suite’s Oracle iSupplier Portal (Supplier Management). Versions 12.2.6–12.2.8 are affected. An unauthenticated, network-accessible attacker can exploit via HTTP to obtain unauthorized read access to a subset of data. The issue is described as easily exploi...

CVE-2022-37436

Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client...

GSD-2023-1001598 staging: vme_user: Fix possible UAF in tsi148_dma_list_add

staging: vmeuser: Fix possible UAF in tsi148dmalistadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001540 powerpc/rtas: avoid scheduling in rtas_os_term()

powerpc/rtas: avoid scheduling in rtasosterm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001301 pnode: terminate at peers of source

pnode: terminate at peers of source This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit b591b2919d018ef91b4a9571edca94105bcad3df...

GSD-2023-1001274 md: fix a crash in mempool_free

md: fix a crash in mempoolfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit ae7793027766491c5f8635b12d15a5940d3b8698. For...

GSD-2023-1001166 Input: elants_i2c - properly handle the reset GPIO when power is off

Input: elantsi2c - properly handle the reset GPIO when power is off This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000985 drm/amd/display: Use the largest vready_offset in pipe group

drm/amd/display: Use the largest vreadyoffset in pipe group This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000468 tracing: Fix race where eprobes can be called before the event

tracing: Fix race where eprobes can be called before the event This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2023-1000445 btrfs: fix resolving backrefs for inline extent followed by prealloc

btrfs: fix resolving backrefs for inline extent followed by prealloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...