Vuldb Updates

A vulnerability was found in Linux Kernel up to 5.10.84/5.15.7 on CPU and classified as critical. This issue affects the function fq_pie_destroy in the library lib/dump_stack.c of the component sched. The manipulation leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2021-47512. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.10.82/5.15.5 and classified as critical. Affected by this vulnerability is the function prestera_bridge_port_join of the component marvell. The manipulation leads to double free. This vulnerability is known as CVE-2021-47564. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.16.4 on FPU. This affects the function dcn301_calculate_wm_and_dlg of the component AMD Display. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2022-48766. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.10.84/5.15.7. Affected by this issue is the function i40e_dbg_dump_desc. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2021-47501. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.30/6.8.9. This affects the function hci_le_big_sync_established_evt of the component Bluetooth. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2024-36011. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.10.95/5.15.18/5.16.4. Affected is the function bpf_get_task_stack. The manipulation leads to unchecked return value. This vulnerability is traded as CVE-2022-48770. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.15.5. It has been rated as critical. Affected by this issue is the function disk_release of the component blk-mq. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2021-47552. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.9. This issue affects the function malidp_mw_connector_reset of the component DRM. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2024-36014. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.10.82/5.15.5. Affected by this vulnerability is the function netif_carrier_on/netif_carrier_off. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2021-47560. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.3. It has been rated as critical. Affected by this issue is the function tls_sw_splice_eof. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2023-52767. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 5.15.139/6.1.63/6.5.12/6.6.2. This vulnerability affects the function hci_dma_irq_handler of the component mipi-i3c-hci. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2023-52766. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.5.12/6.6.2. It has been classified as critical. Affected is an unknown function in the library out/common/lib/dump_stack.c of the component f2fs. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2023-52770. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.1 and classified as critical. Affected by this issue is the function mtk_alloc_clk_data of the component clk-mt6779. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2023-52873. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.1. It has been classified as critical. This affects the function mtk_alloc_clk_data of the component clk-mt2701. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2023-52875. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.1. It has been declared as critical. This vulnerability affects the function mtk_alloc_clk_data. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2023-52876. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.15.137/6.1.61/6.5.10/6.6.0. It has been rated as critical. This issue affects the function tcpm_pd_svdm of the component typec. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2023-52877. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.15.93/6.1.11. This issue affects the function in_dev_get. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2023-52744. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.4.156/5.4.157/5.10.76/5.10.77/5.14.15 and classified as critical. This issue affects the function ttm_transfered_destroy of the component drm. The manipulation leads to memory leak. The identification of this vulnerability is CVE-2021-47490. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.1.65/6.6.2. Affected is the function spi_sync. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2023-52749. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.5.12/6.6.2. It has been rated as problematic. Affected by this issue is the function smb2_query_info_compound of the component SMB Client. The manipulation leads to use after free. This vulnerability is handled as CVE-2023-52751. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.