Vuldb Updates

A vulnerability classified as problematic has been found in omec-project UPF up to 2.1.3-dev. This affects the function handleSessionEstablishmentRequest of the file /pfcpiface/pfcpiface/messages_session.go of the component PFCP Session Establishment Request Handler. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2025-15156. The attack may be initiated remotely. In addition, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability classified as critical was found in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/PPTPServer. Such manipulation of the argument ip1 leads to stack-based buffer overflow. This vulnerability is traded as CVE-2025-15160. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/PPTPUserSetting. Performing manipulation of the argument delno results in stack-based buffer overflow. This vulnerability is known as CVE-2025-15161. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability was found in Tenda WH450 1.0.0.18 and classified as critical. This affects an unknown part of the file /goform/SafeMacFilter. The manipulation of the argument page results in stack-based buffer overflow. This vulnerability was named CVE-2025-15164. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability was found in Linux Kernel up to 6.2.4. It has been rated as critical. This vulnerability affects the function watchdog_cdev_register. The manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2023-53234. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is advised.

A vulnerability has been found in Linux Kernel up to 6.5.4 and classified as critical. The affected element is the function __drm_kunit_helper_alloc_drm_device. Performing manipulation results in use after free. This vulnerability was named CVE-2023-53235. The attack needs to be approached within the local network. There is no available exploit. The affected component should be upgraded.

A vulnerability classified as critical was found in Linux Kernel up to 5.10.175/5.15.103/6.1.20/6.2.7. The impacted element is the function cancel_delayed_work_syn of the component smc. Executing manipulation can lead to deadlock. This vulnerability is registered as CVE-2023-53233. The attack requires access to the local network. No exploit is available. Upgrading the affected component is advised.

A vulnerability has been found in Linux Kernel up to 5.10.187/5.15.120/6.1.38/6.3.12/6.4.3 and classified as critical. This issue affects the function bnxt_re. Performing manipulation results in improper initialization. This vulnerability is known as CVE-2023-53201. Access to the local network is required for this attack. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.23/6.2.10. This affects the function raw_get_next of the component raw. This manipulation causes excessive iteration. This vulnerability is tracked as CVE-2023-53198. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability marked as critical has been reported in Linux Kernel up to 5.15.99/6.1.17/6.2.4. This impacts an unknown function of the file ip_tables.c of the component netfilter. Performing manipulation results in allocation of resources. This vulnerability is cataloged as CVE-2023-53200. The attack must originate from the local network. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.2.2. Affected by this issue is the function ath9k_hif_usb_rx_stream. The manipulation leads to improper initialization. This vulnerability is listed as CVE-2023-53199. The attack must be carried out from within the local network. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.4.250/5.10.187/5.15.120/6.1.38/6.4.3. The impacted element is the function dwc3_qcom_probe of the component usb. The manipulation results in memory leak. This vulnerability is identified as CVE-2023-53196. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability identified as critical has been detected in Linux Kernel up to 5.15.99/6.1.17/6.2.4. This vulnerability affects the function debugfs_lookup. Performing manipulation results in memory leak. This vulnerability is reported as CVE-2023-53197. The attacker must have access to the local network to execute the attack. No exploit exists. You should upgrade the affected component.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.1.38/6.4.3. This affects the function mlxsw_m_linecards_init of the component mlxsw. Performing manipulation results in memory leak. This vulnerability is known as CVE-2023-53195. Access to the local network is required for this attack. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.15.112/6.1.80/6.3.3. The impacted element is the function indx_get_root of the component ntfs3. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2023-53194. The attack needs to be initiated within the local network. No exploit is available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.1.28/6.2.15/6.3.2. Affected by this issue is the function amdgpu_irq_put. Such manipulation leads to information disclosure. This vulnerability is traded as CVE-2023-53193. Access to the local network is required for this attack to succeed. There is no exploit available. The affected component should be upgraded.

A vulnerability has been found in Linux Kernel up to 5.10.189/5.15.125/6.1.44/6.4.9 and classified as critical. This issue affects the function fib_multipath_hash/rt6_multipath_hash of the component vxlan. The manipulation of the argument nh_buckets[] leads to memory corruption. This vulnerability is documented as CVE-2023-53192. The attack requires being on the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.2.2. Affected by this vulnerability is the function of_irq_find_parent of the component alpine-msi. This manipulation causes improper update of reference count. This vulnerability appears as CVE-2023-53191. The attacker needs to be present on the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.4.4. It has been rated as critical. This impacts the function addrconf_mod_rs_timer. The manipulation leads to improper update of reference count. This vulnerability is documented as CVE-2023-53189. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.0.18/6.1.4. Affected is the function vxlan_vnigroup_init. The manipulation results in memory leak. This vulnerability is reported as CVE-2023-53190. The attacker must have access to the local network to execute the attack. No exploit exists. It is advisable to upgrade the affected component.