Vuldb Updates

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.15.93/6.1.11. This issue affects the function in_dev_get. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2023-52744. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.14.15. This vulnerability affects unknown code of the component qib. The manipulation of the argument qib_user_sdma_pkt leads to buffer overflow. This vulnerability was named CVE-2021-47485. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.14.15. Affected is the function amdgpu_dm_debugfs.c. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2021-47489. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.14.15. Affected by this issue is the function regcache_rbtree_exit of the component regmap. The manipulation leads to double free. This vulnerability is handled as CVE-2021-47483. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.4.156/5.4.157/5.10.76/5.10.77/5.14.15 and classified as critical. This issue affects the function ttm_transfered_destroy of the component drm. The manipulation leads to memory leak. The identification of this vulnerability is CVE-2021-47490. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.1.65/6.6.2. Affected is the function spi_sync. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2023-52749. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.5.12/6.6.2. It has been rated as problematic. Affected by this issue is the function smb2_query_info_compound of the component SMB Client. The manipulation leads to use after free. This vulnerability is handled as CVE-2023-52751. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.63/6.5.12/6.6.2 and classified as critical. Affected by this issue is the function release_mid of the component SMB Client. The manipulation leads to use after free. This vulnerability is handled as CVE-2023-52757. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.10.167/5.15.93/6.1.11. This vulnerability affects the function read_into_pages. The manipulation leads to use after free. This vulnerability was named CVE-2023-52741. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was suspected in Linux Kernel up to 6.9-rc6. This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in Linux Kernel up to 6.11.1. Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in wandb. This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in nix up to 2.24.5. Further investigation has shown that this issues is a false-positive. Please review the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in gn_themes WP Shortcodes Plugin up to 7.1.0. This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in BSC Smart Contract 0x0506e571aba3dd4c9d71bed479a4e6d40d95c833.. Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in Linux Kernel up to 6.1.94/6.6.33/6.9.4. This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in Linux Kernel up to 6.6.32/6.9.3. This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in Build App Online Plugin up to 1.0.21. Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in btcd 0.24.2. This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in Linux Kernel up to 6.1.85/6.6.26/6.8.5. This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all.