CVE-2023-54134

CVE-2023-54134 pertains to a memory-leak in Linux autofs waitqueues during autofs_catatonic_mode. The issue occurs when an AUTOFS_IOC_EXPIRE_MULTI ioctl triggers a new waitqueue, its initial wait_ctr is 2, and a concurrent wait may be interrupted, leaving the wait entry not freed if the wait_ctr ...

CVE-2022-50742 misc: ocxl: fix possible refcount leak in afu_ioctl()

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible refcount leak in afuioctl eventfdctxput need to be called to put the refcount that gotten by eventfdctxfdget when ocxlirqsethandler fails...

CVE-2025-68735

CVE-2025-68735 corresponds to a Linux kernel drm/panthor issue where a use-after-free could occur in GROUP_CREATE by accessing a group handle after storing it in the Xarray. The fix applies a mark on the group pool Xarray entry just before GROUP_CREATE returns; this mark is checked by ioctls that...

PT-2025-53108

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ocxl module related to a potential reference count leak within the afu ioctl function. Specifically, the eventfd ctx put function was not being...

CVE-2023-54137: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vfio/type1: fix capmigration information leak Fix an information leak where an uninitialized hole in struct vfioiommutype1infocapmigration on the stack is exposed to userspace. The definition of struct...

CVE-2022-50709: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid uninit memory read in ath9khtcrxmsg syzbot is reporting uninit value at ath9khtcrxmsg 1, for ioctlUSBRAWIOCTLEPWRITE can call ath9khifusbrxstream with pktlen = 0 but ath9khifusbrxstream uses devallocskbpktlen +...

PT-2026-36849

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs during the processing of an IOCTL Input/Output Control command when the device is in a power-save state. Recommendations At the moment,...

CVE-2025-47387

Memory Corruption when processing IOCTLs for JPEG data without verification...

CVE-2025-47322

Memory corruption while handling IOCTL calls to set mode...

CVE-2025-47322: Use After Free

Memory corruption while handling IOCTL calls to set mode...

CVE-2025-47387: Untrusted Pointer Dereference

Memory Corruption when processing IOCTLs for JPEG data without verification...

kernel: nbd: fix incomplete validation of ioctl arg

A flaw has been found in the Linux kernel’s NBD drivers.The issue stems from incomplete validation of IOCTL arguments passed to the NBD driver. Specifically, oversized or unchecked arguments may lead to a signed integer overflow in blockwritefullpage and misuse of argument values cast to int in...

kernel: nbd: fix incomplete validation of ioctl arg

A flaw has been found in the Linux kernel’s NBD drivers.The issue stems from incomplete validation of IOCTL arguments passed to the NBD driver. Specifically, oversized or unchecked arguments may lead to a signed integer overflow in blockwritefullpage and misuse of argument values cast to int in...

RHEL 9 : kernel (RHSA-2025:23426)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23426 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: scsi: qla2xxx: Wait for io...

CVE-2025-67790: Improper Null Termination

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. An unprivileged user could cause occasionally a Blue Screen Of Death BSOD on Windows computers by using an IOCTL and an unterminated string...

RHEL 9 : kernel-rt (RHSA-2025:23424)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23424 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

CVE-2025-68257

CVE-2025-68257 : Linux kernel COMEDI subsystem vulnerability where compat ioctl handlers could dereference a NULL callback when the device was not attached. Root cause: compat ioctls lacked a proper sanity check of device attached status, allowing a NULL dereference in path leading to a crash. Fi...

The vulnerability of the system call ioctl driver ltq-ptm of the operating system for OpenWrt routers allows a hacker to gain access to read and write memory in the kernel.

The vulnerability of the system call ioctl driver ltq-ptm of the operating system for OpenWrt routers allows a hacker to gain access to read and write memory in the kernel...

CVE-2025-68258: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3attach Syzbot identified an issue 1 in multiq3attach that induces a task timeout due to open or COMEDIDEVCONFIG ioctl operations, specifically, in the case of multiq3 driver. Thi...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991132 advisory. In the Linux kernel, the following vulnerability has been resolved: dm ioctl: fix misbehavior if listversions races with module loading listversions will first...