Vuldb Updates

A vulnerability classified as problematic was found in Linux Kernel up to 5.15.139/6.1.63/6.5.12/6.6.2. This vulnerability affects the function hci_dma_irq_handler of the component mipi-i3c-hci. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2023-52766. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.5.12/6.6.2. It has been classified as critical. Affected is an unknown function in the library out/common/lib/dump_stack.c of the component f2fs. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2023-52770. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.1 and classified as critical. Affected by this issue is the function mtk_alloc_clk_data of the component clk-mt6779. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2023-52873. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.1. It has been classified as critical. This affects the function mtk_alloc_clk_data of the component clk-mt2701. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2023-52875. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.1. It has been declared as critical. This vulnerability affects the function mtk_alloc_clk_data. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2023-52876. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.15.137/6.1.61/6.5.10/6.6.0. It has been rated as critical. This issue affects the function tcpm_pd_svdm of the component typec. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2023-52877. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.15.93/6.1.11. This issue affects the function in_dev_get. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2023-52744. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.14.15. This vulnerability affects unknown code of the component qib. The manipulation of the argument qib_user_sdma_pkt leads to buffer overflow. This vulnerability was named CVE-2021-47485. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.14.15. Affected is the function amdgpu_dm_debugfs.c. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2021-47489. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.4.156/5.4.157/5.10.76/5.10.77/5.14.15 and classified as critical. This issue affects the function ttm_transfered_destroy of the component drm. The manipulation leads to memory leak. The identification of this vulnerability is CVE-2021-47490. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.1.65/6.6.2. Affected is the function spi_sync. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2023-52749. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.5.12/6.6.2. It has been rated as problematic. Affected by this issue is the function smb2_query_info_compound of the component SMB Client. The manipulation leads to use after free. This vulnerability is handled as CVE-2023-52751. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.63/6.5.12/6.6.2 and classified as critical. Affected by this issue is the function release_mid of the component SMB Client. The manipulation leads to use after free. This vulnerability is handled as CVE-2023-52757. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.10.167/5.15.93/6.1.11. This vulnerability affects the function read_into_pages. The manipulation leads to use after free. This vulnerability was named CVE-2023-52741. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was suspected in Linux Kernel up to 6.9-rc6. This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in Linux Kernel up to 6.11.1. Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in wandb. This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in nix up to 2.24.5. Further investigation has shown that this issues is a false-positive. Please review the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in gn_themes WP Shortcodes Plugin up to 7.1.0. This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in BSC Smart Contract 0x0506e571aba3dd4c9d71bed479a4e6d40d95c833.. Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all.