VulDB Recent Entries

A vulnerability classified as problematic has been found in Linux Kernel up to 6.2.6. This affects the function fsmap_head of the component ext4. The manipulation leads to off-by-one. This vulnerability is uniquely identified as CVE-2023-53143. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.4.236/5.10.174/5.15.102/6.1.19/6.2.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the component riscv. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2023-53135. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.4.236/5.10.174/5.15.102/6.1.19/6.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component bnxt_en. The manipulation leads to allocation of resources. This vulnerability is known as CVE-2023-53134. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.2.7. It has been classified as critical. Affected is the function nvmet_req_complete of the component nvmet. The manipulation leads to use after free. This vulnerability is traded as CVE-2023-53116. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.2.6 and classified as critical. This issue affects the function fdp_nci_i2c_read_device_properties of the component nfc. The manipulation leads to out-of-bounds write. The identification of this vulnerability is CVE-2023-53139. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.4.236/5.10.174/5.15.102/6.1.19/6.2.6 and classified as critical. This vulnerability affects unknown code of the component ext4. The manipulation leads to denial of service. This vulnerability was named CVE-2023-53137. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.20/6.2.7. This affects an unknown part of the component scsi. The manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2023-53120. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.20/6.2.7. Affected by this issue is the function mlx5e_tc_esw_cleanup. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2023-53105. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.15.102/6.1.19/6.2.6. Affected by this vulnerability is the function tcp_bpf_recvmsg_parser. The manipulation leads to infinite loop. This vulnerability is known as CVE-2023-53133. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.10.174/5.15.102/6.1.19/6.2.6. Affected is the function kthread_stop of the component SUNRPC. The manipulation leads to denial of service. This vulnerability is traded as CVE-2023-53131. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function blkdev_put of the component block. The manipulation leads to privilege escalation. The identification of this vulnerability is CVE-2023-53130. The attack can only be initiated within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Linux Kernel up to 5.4.237/5.10.175/5.15.103/6.1.20/6.2.7. It has been declared as critical. This vulnerability affects the function mpt3sas_transport_port_add of the component scsi. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2023-53124. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.4.237/5.10.175/5.15.103/6.1.20/6.2.7. It has been classified as critical. This affects the function scsi_proc_hostdir_rm of the component scsi. The manipulation leads to improper update of reference count. This vulnerability is uniquely identified as CVE-2023-53118. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.2.7 and classified as critical. Affected by this vulnerability is the function ndlc_remove. The manipulation leads to use after free. This vulnerability is known as CVE-2023-53106. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.2.6 and classified as problematic. Affected by this issue is the function i_disksize of the file fs/ext4/file.c. The manipulation leads to improper initialization. This vulnerability is handled as CVE-2023-53101. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.10.175/5.15.103/6.1.20/6.2.7. Affected is the function smc_cdc_tx_handler. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2023-53110. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.19/6.2.6 on HIGHMEM. This issue affects the function erofs_worker of the component erofs. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2023-53144. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.1.20/6.2.7. This vulnerability affects unknown code of the component wifi. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2023-53113. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel. This affects the function skb_pull of the component net. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2023-53104. The attack can only be done within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Linux Kernel up to 5.15.102/6.1.19/6.2.6. It has been rated as critical. Affected by this issue is the function ice_get_module_eeprom of the component Reimplement Module. The manipulation leads to buffer overflow. This vulnerability is handled as CVE-2023-53142. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.