VulnCheck KEV: CVE-2023-1671

Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution...

kernel: wifi: ath6kl: reduce WARN to dev_dbg() in callback

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: reduce WARN to devdbg in callback The warn is triggered on a known race condition, documented in the code above the test, that is correctly handled. Using WARN hinders automated testing. Reducing severity...

kernel: ASoC: soc-compress: Reposition and add pcm_mutex

A locking issue was found in the ASoC ALSA SoC compressed audio subsystem in the Linux kernel. When DPCM Dynamic PCM compressed streams are started, several functions access resources without properly holding the card-pcmmutex lock. This triggers lock assertion warnings and can cause kernel panic...

PT-2024-14663

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc5+ Description The vulnerability is related to the ext4 file system in the Linux kernel. When an ext4 file system is online resized with an oversized flexbg size, it can trigger a WARN ON due to the size ...

CLSA-2023-1693427752 Update of alt-php

Jammy update: v5.15.97 upstream stable release LP: 2015599 - net: Remove WARNONONCEsk-skforwardalloc from skstreamkillqueues...

PT-2025-53217

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the nilfs2 file system within the Linux kernel where a kernel warning or panic may occur due to the reuse of discarded buffers in the mark buffer dirty function,...

reactor-netty-http: Log request headers in some cases of invalid HTTP requests

A flaw was found in the Reactor Netty HTTP Server, which may log request headers in some cases of invalid HTTP requests. This could allow an attacker to access privileged information when WARN level logging is enabled...

CVE-2023-34241

OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data...

PT-2025-49732

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-319.el9.x86 64 1 Description The Linux kernel contained an issue where devlink port type warn would schedule a warning when a devlink port type was not set, but the warning did not clearly indicate which...

PT-2025-26154

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc3+ Description A vulnerability in the Linux kernel has been resolved, specifically in the KVM: SVM component. The issue occurs when userspace injects an interrupt with GIF=0, which can cause the kernel t...

Sophos Web Appliance warn-proceed handler arbitrary command execution

The vulnerability of the warn-proceed handler component of the Sophos Web Appliance SWA security and management device for web devices is related to the lack of measures to sanitize input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

PT-2025-37536

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the fsverity functionality. A change introduced by commit 56124d6c87fd, intended to support enabling fsverity with smaller tree block sizes,...

CVE-2023-1671

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code...

CVE-2023-1671: Improper Neutralization of Special Elements used in a Command

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code...

PT-2023-2510

Name of the Vulnerable Software and Affected Versions Sophos Web Appliance versions prior to 4.3.10.4 Description The issue is related to a lack of input sanitization in the warn-proceed handler component of Sophos Web Appliance, which can be exploited by a remote attacker to execute arbitrary...

PT-2025-38377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the mlx5 component related to potential use-after-free in the PTP Precision Time Protocol queue FIFO First-In, First-Out buffer. Insufficient chec...

PT-2023-33148 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue provides a little extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2023-33410 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.268 Description: The issue provides a little extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33945

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...

PT-2023-33472

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.19 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...