Vuldb Updates

A vulnerability was found in Linux Kernel up to 6.1.27/6.2.14/6.3.1 and classified as critical. This impacts the function tpm_amd_is_rng_defective of the component tpm. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2023-54073. The attack requires being on the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 6.12.44/6.16.4/6.17-rc3. This affects the function xe_vm_free_scratch. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2025-39811. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.12.44/6.16.4/6.17-rc3. The impacted element is the function bnxt_set_dflt_rings. The manipulation of the argument tx_ring[] leads to memory corruption. This vulnerability is traded as CVE-2025-39810. Access to the local network is required for this attack to succeed. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.16.4/6.17-rc3. The affected element is the function quicki2c_acpi_get_dsd_property of the component HID. Executing manipulation can lead to out-of-bounds read. This vulnerability appears as CVE-2025-39809. The attacker needs to be present on the local network. There is no available exploit. The affected component should be upgraded.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.44/6.16.4/6.17-rc3. This issue affects the function macb_remove of the file fs/kernfs/dir.c of the component Netdev Call Handler. Such manipulation leads to privilege escalation. This vulnerability is documented as CVE-2025-39805. The attack requires being on the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.44/6.16.4/6.17-rc3. It has been declared as critical. This affects the function atomic_disable of the component Virtual Address Handler. The manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2025-39807. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.4.3 and classified as critical. This issue affects the function nf_conntrack_dccp_packet of the component netfilter. Performing manipulation results in stack-based buffer overflow. This vulnerability is reported as CVE-2023-53333. The attacker must have access to the local network to execute the attack. No exploit exists. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 5.15.99/6.1.17/6.2.4 and classified as critical. Impacted is the function debugfs_lookup of the component USB. Executing manipulation can lead to memory leak. This vulnerability appears as CVE-2023-53334. The attacker needs to be present on the local network. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.17/6.2.4. This impacts the function irq_data_get_affinity_mask of the component ipi. Such manipulation of the argument data leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2023-53332. The attack can only be initiated within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.5.2. The affected element is the function buffer_size. Such manipulation leads to improper initialization. This vulnerability is documented as CVE-2023-53331. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.4. This vulnerability affects the function cfctrl_linkup_request of the component caif. Such manipulation leads to memory leak. This vulnerability is documented as CVE-2023-53330. The attack requires being on the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.2.14/6.3.1. The affected element is the function WARN_ON. This manipulation causes buffer overflow. This vulnerability is tracked as CVE-2023-53327. The attack is only possible within the local network. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.5.2. Affected by this issue is the function process_one_work of the file kernel/workqueue.c of the component workqueue. Performing manipulation results in state issue. This vulnerability is identified as CVE-2023-53329. The attack can only be performed from the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.15.127/6.1.46/6.4.11. This affects the function attr_list of the component ntfs3. This manipulation causes null pointer dereference. This vulnerability is registered as CVE-2023-53328. The attack requires access to the local network. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.5.2. It has been declared as critical. Affected by this issue is the function plane_state. Such manipulation leads to improper update of reference count. This vulnerability is uniquely identified as CVE-2023-53324. The attack can only be initiated within the local network. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.10.176/5.15.105/6.1.22/6.2.9. It has been classified as critical. This affects the function ppr_get of the component powerpc. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2023-53326. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.1.54/6.5.4. It has been declared as critical. This issue affects the function mtk_dp_aux_transfer of the component mediatek. Executing manipulation can lead to null pointer dereference. This vulnerability is handled as CVE-2023-53325. The attack can only be done within the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.4.4. It has been rated as critical. This affects the function terminate_rport_io. Performing manipulation results in use after free. This vulnerability was named CVE-2023-53322. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is advised.

A vulnerability classified as critical was found in Linux Kernel up to 6.1.39/6.4.4. Affected by this issue is the function dax_zero_range. The manipulation results in buffer overflow. This vulnerability is cataloged as CVE-2023-53323. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Linux Kernel up to 5.4.256/5.10.196/5.15.132/6.1.54/6.5.4. Affected by this vulnerability is the function mac80211_hwsim of the component wifi. The manipulation leads to privilege escalation. This vulnerability is listed as CVE-2023-53321. The attack must be carried out from within the local network. There is no available exploit. It is recommended to upgrade the affected component.