Vuldb Updates

A vulnerability has been found in Linux Kernel up to 6.7.1 and classified as problematic. Impacted is the function of_parse_phandle_with_args_map. The manipulation leads to double free. This vulnerability is referenced as CVE-2023-52679. The attack needs to be initiated within the local network. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.1.76/6.6.15/6.7.3. Impacted is the function aq_ring_free of the component atlantic. Performing a manipulation results in double free. This vulnerability is identified as CVE-2023-52664. The attack can only be performed from the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.23/6.7.11/6.8.2 and classified as critical. This affects the function read_extent_buffer_pages of the component btrfs. Such manipulation leads to race condition. This vulnerability is documented as CVE-2024-35798. The attack requires being on the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.6.23/6.7.11/6.8.2. The affected element is the function get_shadow_from_swap_cache of the component cachestat. The manipulation results in out-of-bounds read. This vulnerability is known as CVE-2024-35797. Access to the local network is required for this attack. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.7.11. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing initialization of a variable. This vulnerability is referenced as CVE-2024-35804. The attack needs to be initiated within the local network. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.7.11/6.8.2. This vulnerability affects the function md_reap_sync_thread of the file md/dm-raid: of the component dm-raid. Such manipulation leads to deadlock. This vulnerability is listed as CVE-2024-35808. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.23/6.7.11/6.8.2. This affects the function vmw_plane_state of the component vmwgfx. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2024-35810. Access to the local network is required for this attack to succeed. There is no exploit available. You should upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.8.2 and classified as problematic. This issue affects the function brcmf_cfg80211_detach. Performing a manipulation results in use after free. This vulnerability is cataloged as CVE-2024-35811. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.8.2 and classified as problematic. Impacted is the function prev_idata of the component mmc. Executing a manipulation can lead to improper validation of array index. This vulnerability is registered as CVE-2024-35813. The attack requires access to the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.23/6.7.11/6.8.2. It has been classified as problematic. The affected element is the function dma_alloc_coherent of the component swiotlb. The manipulation leads to allocation of resources. This vulnerability is documented as CVE-2024-35814. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability described as critical has been identified in Linux Kernel up to 5.15.153/6.1.83/6.6.23/6.7.11/6.8.2. Impacted is the function amdgpu_ttm_gart_bind. Such manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2024-35817. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in Linux Kernel up to 5.15.148/6.1.75/6.6.14/6.7.2. This impacts the function kcalloc of the component mlx5e. The manipulation leads to double free. This vulnerability is uniquely identified as CVE-2023-52667. The attack can only be initiated within the local network. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.10.209/5.15.148/6.1.75/6.6.14/6.7.2 and classified as critical. This affects an unknown part of the component s390. Performing a manipulation results in buffer overflow. This vulnerability is identified as CVE-2023-52669. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Linux Kernel up to 5.10.209/5.15.148/6.1.75/6.6.14/6.7.2. This affects an unknown function of the component s390. Performing a manipulation results in buffer overflow. This vulnerability is reported as CVE-2023-52669. The attacker must have access to the local network to execute the attack. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of the file view_students.php. Such manipulation of the argument class_group leads to authorization bypass. This vulnerability is traded as CVE-2026-19066. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Linux Kernel up to 6.7.8. It has been declared as problematic. Affected is an unknown function of the component Bluetooth. Executing a manipulation can lead to information disclosure. This vulnerability is tracked as CVE-2024-27416. The attack is only possible within the local network. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 5.15.150/6.1.80/6.6.20/6.7.8. The impacted element is the function skb_clone of the component Netfilter. Executing a manipulation can lead to state issue. This vulnerability is tracked as CVE-2024-27415. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.15.152/6.1.82/6.6.22/6.7.10/6.8.1. Affected by this issue is the function vmw_gmrid_man_get_node of the component vmwgfx. The manipulation results in memory leak. This vulnerability is identified as CVE-2023-52662. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 5.10.212/5.15.151/6.1.81/6.6.21/6.7.9. It has been classified as problematic. Affected is the function xdp_rxq_info of the component cpumap. The manipulation leads to insufficiently random values. This vulnerability is uniquely identified as CVE-2024-27431. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability labeled as problematic has been found in Linux Kernel up to 5.12/6.1.82/6.6.22/6.7.10/6.8.1. This vulnerability affects unknown code of the component nvme. Such manipulation leads to allocation of resources. This vulnerability is documented as CVE-2024-27435. The attack requires being on the local network. There is not any exploit available. The affected component should be upgraded.