8768 matches found
kernel: vt_ioctl: fix array_index_nospec in vt_setactivate
A vulnerability was found in the Linux kernel's vtioctl subsystem, where the vtsetactivate function can lead to a transient integer underflow due to improper handling of the vsa.console value. The vulnerability arises when an out-of-bounds value is decreased before being sanitized using...
kernel: tty: Fix out-of-bound vmalloc access in imageblit
A vulnerability was found in the Linux kernel's tty subsystem within the imageblit function when a userspace program performs an ioctl operation with the FBIOPUTVSCREENINFO command, passing a fbvarscreeninfo structure with limited fields. If the structure’s values remain unchanged from a previous...
CVE-2024-46762 xen: privcmd: Fix possible access to a freed kirqfd instance
In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneous ioctl calls to privcmdirqfdassign and privcmdirqfddeassign. If that happens, it is possible that a kirqfd created and added to the...
CVE-2024-46762 xen: privcmd: Fix possible access to a freed kirqfd instance
In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneous ioctl calls to privcmdirqfdassign and privcmdirqfddeassign. If that happens, it is possible that a kirqfd created and added to the...
PT-2024-32793
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue concerns the Linux kernel, specifically the vhost vdpa component. It involves the incorrect assignment of the irq bypass producer token. The problem arises because the irq bypass...
CVE-2024-45008
In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...
UBUNTU-CVE-2024-45008
In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...
CVE-2024-45008
In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...
CVE-2024-45008 Input: MT - limit max slots
In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...
CVE-2024-45008
In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...
CVE-2024-45008: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...
CVE-2024-38402
Memory corruption while processing IOCTL call for getting group info...
CVE-2024-38401
Memory corruption while processing concurrent IOCTL calls...
CVE-2024-38402 Use After Free in DSP Services
Memory corruption while processing IOCTL call for getting group info...
CVE-2024-38402
CVE-2024-38402 is a memory corruption via a refcount leak in the Qualcomm ADSPRPC DSP driver (fastrpc_get_process_gids). The vulnerability can enable use-after-free of the group_info structure, exposing kernel memory through a non-saturating refcount that can overflow with repeated calls. Disclos...
CVE-2024-38402 Use After Free in DSP Services
Memory corruption while processing IOCTL call for getting group info...
CVE-2024-38401 Use After Free in Qualcomm IPC
Memory corruption while processing concurrent IOCTL calls...
CVE-2024-38401
CVE-2024-38401 describes a memory corruption issue due to a use-after-free in the Qualcomm IPC component when processing concurrent IOCTL calls on Qualcomm chipsets. Affected software: Qualcomm IPC on Qualcomm chipsets (per CVE listing). Root cause: improper handling of concurrent IOCTL processin...