RUSTSEC-2023-0126 Aliasing violation in `OrdSet` insertion

Inserting into an im::OrdSet for example by collecting an iterator into one can violate Rust's aliasing rules: Miri reports a stacked borrows violation in sizedchunks::Chunk::forcecopy, which is called during insertion, where a shared borrow is invalidated by a unique borrow before the read throu...

PT-2023-36991

Inserting into an im::OrdSet for example by collecting an iterator into one can violate Rust's aliasing rules: Miri reports a stacked borrows violation in sized chunks::Chunk::force copy, which is called during insertion, where a shared borrow is invalidated by a unique borrow before the read...

SUSE-SU-2023:0209-1 Security update for vim

This update for vim fixes the following issues: - Updated to version 9.0.1234: - CVE-2023-0433: Fixed an out of bounds memory access that could cause a crash bsc1207396. - CVE-2023-0288: Fixed an out of bounds memory access that could cause a crash bsc1207162. - CVE-2023-0054: Fixed an out of...

unicorn:fuzz_emu_mips_32be: Index-out-of-bounds in mipsdsp_rndrashift_short_acc

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=4996708801314816 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32be Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...

GSD-2023-1001514 lib/fonts: fix undefined behavior in bit shift for get_default_font

lib/fonts: fix undefined behavior in bit shift for getdefaultfont This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001266 ext4: fix undefined behavior in bit shift for ext4_check_flag_values

ext4: fix undefined behavior in bit shift for ext4checkflagvalues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000845 lib/fonts: fix undefined behavior in bit shift for get_default_font

lib/fonts: fix undefined behavior in bit shift for getdefaultfont This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000788 drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED

drm/ttm: fix undefined behavior in bit shift for TTMTTFLAGPRIVPOPULATED This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000446 ext4: fix undefined behavior in bit shift for ext4_check_flag_values

ext4: fix undefined behavior in bit shift for ext4checkflagvalues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33865 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns undefined behavior in a bit shift operation related to TTM TT FLAG PRIV POPULATED. The actual impact and potential for attack have not been proven. Recommendations: For...

PT-2023-34591

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.23 through 5.10.162 Description The issue concerns undefined behavior in a bit shift operation within the get default font function in the lib/fonts component. This behavior was introduced in version 2.6.23 and fixed ...

PT-2023-33922

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue concerns undefined behavior in a bit shift operation related to getting the default font in the lib/fonts component. The actual impact and potential for attack have not been confirme...

PT-2023-34343

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-33983

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-34606

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

CVE-2022-32659

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066...

CVE-2022-32658

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705059; Issue ID: GN20220705059...

CVE-2022-32657

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705042; Issue ID: GN20220705042...

CVE-2022-32659

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066...

CVE-2022-32658

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705059; Issue ID: GN20220705059...