[SECURITY] Fedora 38 Update: rust-kvm-ioctls-0.16.0-3.fc38

Safe wrappers over KVM ioctls...

Fedora: Security Advisory for rust-kvm-ioctls (FEDORA-2024-f2305d485f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: rust-kvm-ioctls-0.16.0-2.fc39

Safe wrappers over KVM ioctls...

Fedora: Security Advisory for rust-kvm-ioctls (FEDORA-2024-04877592b7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory corruption

Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP...

CVE-2023-43514

CVE-2023-43514 describes a memory corruption issue in Qualcomm DSP firmware related to IOCTL handling for internal memory map/unmap. Reports consistently identify the root cause as memory corruption arising from operations on internal memory (memory after it has been freed) during fastrpc interna...

CVE-2023-43514 Use After Free in DSP Services

Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP...

CVE-2023-22668

Memory Corruption in Audio while invoking IOCTLs calls from the user-space...

Memory corruption

Memory Corruption in Audio while invoking IOCTLs calls from the user-space...

CVE-2023-22668 Use After Free in Audio

Memory Corruption in Audio while invoking IOCTLs calls from the user-space...

CVE-2023-22668

CVE-2023-22668 describes a memory corruption issue in the audio subsystem when user-space IOCTLs are invoked on Qualcomm chipsets. Affected component: audio path in Qualcomm devices; root cause: memory corruption leading to potential impact on confidentiality, integrity, and availability (per CVS...

CVE-2023-22668: Use After Free

Memory Corruption in Audio while invoking IOCTLs calls from the user-space...

SUSE CVE-2023-46277

please aka pleaser through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. If both TIOCSTI and TIOCLINUX are disabled, this cannot be exploited...

CVE-2023-46277

please aka pleaser through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. If both TIOCSTI and TIOCLINUX are disabled, this cannot be exploited...

UBUNTU-CVE-2023-46277

please aka pleaser through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. If both TIOCSTI and TIOCLINUX are disabled, this cannot be exploited...

please Security breach

please is a sudo clone by the individual developer of ed neville. A security vulnerability exists in please 0.5.4 and earlier, which stems from allowing privilege escalation via TIOCSTI and/or TIOCLINUX ioctl...

CLSA-2023-1686651204 kernel: Fix of 25 CVEs

cgroup: Use open-time cgroup namespace for process migration perm checks CVE-2021-4197 - cgroup: Use open-time credentials for process migraton perm checks CVE-2021-4197 - vt: drop old FONT ioctls CVE-2021-33656 - fbmem: Check virtual screen sizes in fbsetvar CVE-2021-33655 - fbcon: Prevent that...

kernel: possible race condition in drivers/tty/tty_buffers.c

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flushtoldisc function. This flaw allows a local user to crash the...

Vulnerable to privilege escalation using ioctls TIOCSTI and TIOCLINUX

please is vulnerable to privilege escalation using ioctls TIOCSTI and TIOCLINUX on systems where they are not disabled. Here is how to see it in action: $ cd "$mktemp -d" $ git clone --depth 1 https://gitlab.com/edneville/please.git $ cd please/ $ git rev-parse HEAD...

RUSTSEC-2023-0066 Vulnerable to privilege escalation using ioctls TIOCSTI and TIOCLINUX

please is vulnerable to privilege escalation using ioctls TIOCSTI and TIOCLINUX on systems where they are not disabled. Here is how to see it in action: $ cd "$mktemp -d" $ git clone --depth 1 https://gitlab.com/edneville/please.git $ cd please/ $ git rev-parse HEAD...