PT-2022-33428 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue concerns the KVM module in the Linux Kernel, where a reference to /dev/kvm is unconditionally obtained when creating a VM. The actual impact and attack plausibility have not yet be...

AZL-34861 CVE-2022-38096 affecting package kernel for versions less than 6.6.35.1-4

A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of...

DEBIAN-CVE-2022-38096

A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of...

CVE-2022-38096

A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of...

UBUNTU-CVE-2022-36280

An out-of-boundsOOB memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxkms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial...

UBUNTU-CVE-2022-38096

A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of...

UBUNTU-CVE-2022-38457

A use-after-freeUAF vulnerability was found in function 'vmwcmdrescheck' in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of...

CVE-2022-38096 There is a NULL pointer vulnerability in vmwgfx driver

A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of...

CVE-2022-36280 There is an out-of-bounds write vulnerability in vmwgfx driver

An out-of-boundsOOB memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxkms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial...

PT-2022-5104 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: An integer overflow vulnerability was found in the vmwgfx driver in the GPU component of the Linux kernel. This flaw allows a local attacker with a user account on the system to gain...

CVE-2022-36402

An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of serviceDoS...

The vulnerability of the Adobe Connect instant messaging program, related to the，。

The vulnerability of the Adobe Connect instant messaging program relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to remotely write arbitrary files to the device’s file system...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from incorrect restrictions on the path to the restricted catalog. This allows attackers to write arbitrary files into the device’s file system.

The vulnerability of the Magento Commerce development and management software platform is related to incorrect restrictions on the path name used to access the restricted catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the device’s file system...

kernel: child process is able to access parent mm through hfi dev file handle

A flaw use after free in the Linux kernel infiniband hfi1 driver was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system...

Cisco TelePresence Collaboration Endpoint 路径遍历漏洞

Cisco TelePresence Collaboration Endpoint CE is a Cisco collaboration endpoint software used in Cisco video conferencing solutions. A path traversal vulnerability exists in Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software, which stems from insufficient path validati...

The vulnerability of the infiniband HFI1 driver in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s infiniband HFI1 driver relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure, after opening the dev and fork files...

DEBIAN-CVE-2020-35517

A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices...

PT-2021-7324 · Qemu +8 · Qemu +8

Name of the Vulnerable Software and Affected Versions: qemu affected versions not specified Description: A flaw was found in the virtio-fs shared file system daemon of qemu, which is related to insecure privilege management. This issue allows a privileged guest user to create a device special fil...

The vulnerability of the REST API implementation of the network management system’s data center management module allows a attacker to re-record any files on the device.

The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to errors in processing input data. Exploiting this vulnerability allows an attacker to re-record any files on the device remotely...

Kernel: kvm: OOB memory write via kvm_dev_ioctl_get_cpuid

An out-of-bounds memory write issue was found in the way the Linux kernel's KVM hypervisor handled the 'KVMGETEMULATEDCPUID' ioctl2 request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulti...