CVE-2022-3577: Missing Release of Memory after Effective Lifetime

An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigbenprobe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben...

CVE-2022-3077

A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2CSMBUSBLOCKPROCCALL case via the ioctl I2CSMBUS with malicious input data. This flaw could allow a local user to crash the system...

CVE-2022-3077

A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2CSMBUSBLOCKPROCCALL case via the ioctl I2CSMBUS with malicious input data. This flaw could allow a local user to crash the system...

CVE-2022-3077: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2CSMBUSBLOCKPROCCALL case via the ioctl I2CSMBUS with malicious input data. This flaw could allow a local user to crash the system...

Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5602-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5602-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A...

Design/Logic Flaw

An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2CSMBUSBLOCKDATA with the ioctl I2CSMBUS with malicious input data. This flaw allows a local user to crash the system...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds memory access vulnerability found in Intel's iSMT SMBus host controller driver, which can...

CVE-2022-2873: Incorrect Calculation of Buffer Size

An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2CSMBUSBLOCKDATA with the ioctl I2CSMBUS with malicious input data. This flaw allows a local user to crash the system...

FreeBSD 安全漏洞

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. FreeBSD suffers from a security vulnerability that originates from a boundary error in the mpr, mps, and mpt disk collector drivers. A local attacker could exploit the vulnerability to escalate privileges on the system...

PT-2021-26691

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.293 Description: The issue is related to the ohci-tmio host controller driver in the Linux Kernel. It involves checking the return value after calling the platform get resource function. The actual impact a...

PT-2021-26738

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.162 Description: The issue is related to the ohci-tmio host controller driver in the Linux Kernel. It involves checking the return value after calling the platform get resource function. The actual impact a...

PT-2021-4439 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an integer overflow in the Storage Spaces Controller driver, which can be exploited to elevate privileges. This could allow an attacker to affect the system. No...

The vulnerability of the drivers/usb/host/max3421-hcd.c component of the Linux operating system’s kernel lies in the use of memory after it is freed, allowing an attacker to trigger a service failure.

The vulnerability of the Linux operating system’s driver/usb/host/max3421-hcd.c component is related to the use of memory after it has been freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2021-5680

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient protection of service data in the Storage Spaces Controller driver, which can allow an attacker to gain unauthorized access to protected information. This...

PT-2021-6036 · Microsoft · Windows Storage Spaces Controller +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Spaces Controller affected versions not specified Description: The issue is related to errors in object handling in memory within the Storage Spaces Controller driver in Windows operating systems. This can allow an attacker to...

PT-2021-6944

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description The issue is related to an integer overflow in the Storage Spaces Controller driver, which can be exploited to elevate privileges. This could allow an attacker to...

EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2021-1994)

According to the version of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...

CVE-2021-20261

A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device /dev/fd0 are restricted to root. If the permissions on the device have changed the...

CVE-2021-20261

A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device /dev/fd0 are restricted to root. If the permissions on the device have changed the...

EulerOS 2.0 SP8 : qemu (EulerOS-SA-2021-1169)

According to the version of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.CVE-2020-25624 Note that Tenabl...