CVE-2022-1353

A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information...

DEBIAN-CVE-2022-1353

A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information...

CVE-2022-1353

A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which originates from a problem with the pfkeyregister function in net/key/afkey.c. This vulnerability can be exploited by ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.16.10 have a security vulnerability that stems from the lack of RNDIS USB validation of the size of the RNDIS MSG SET command. An attacker could exploit this vulnerabilit...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.10 and fixes at least the following security issues: A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close and fget simultaneously and can potentially...

Exploit for Out-of-bounds Write in Google Android

inspector-gadget Go Go Gadget Exploit! ..--"...

Exploit for Improper Input Validation in Linux Linux_Kernel

This is a PoC exploit for CVE-2021-3490, a Linux kernel vulnerability. The exploit targets the eBPF subsystem and leverages a bug in the verifier to gain arbitrary read and write access to kernel memory. The exploit is designed to work on Ubuntu 20.04.02 and 20.10 Groovy Gorilla kernels 5.8.0-25....

The vulnerability of the MODAPI.sys driver software, used for optimizing performance in the MSI Dragon Center, allows a hacker to increase their privileges.

The vulnerability of the MODAPI.sys driver software used for optimizing the performance of MSI Dragon Center relates to the ability to access kernel memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability in the `timer_create` system call handling mechanism of Linux kernels allows a malicious actor to gain access to kernel memory from user space or cause a system crash.

The vulnerability of the timercreate function in Linux kernel-based system calls involves reading memory beyond its permitted limits. Exploiting this vulnerability can allow an attacker to gain access to kernel memory from user space or cause a system failure...

The vulnerability in the `net/can/bcm.c` component of the Linux operating system allows a hacker to read a portion of the kernel’s memory.

The vulnerability in the net/can/bcm.c component of the Linux operating system exists due to the lack of initialization for a certain data structure. Exploiting this vulnerability could allow an attacker to read part of the kernel’s memory...

CVE-2021-29337

MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate privileges via a crafted IOCTL 0x9c406104 call. This IOCTL provides the MmMapIoSpace feature for mapping physical memory...

CVE-2021-29337

MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate privileges via a crafted IOCTL 0x9c406104 call. This IOCTL provides the MmMapIoSpace feature for mapping physical memory...

CVE-2021-29337

CVE-2021-29337 concerns the MSI Dragon Center kernel driver MODAPI.sys (version 2.0.104.0). The vulnerability arises from an IOCTL 0x9c406104 that exposes the MmMapIoSpace facility, enabling low-privileged users to interact with physical memory. This can lead to kernel memory access and potential...

Micro Star Dragon Center 安全漏洞

Micro Star Dragon Center is an application for management control of MSI components, desktop systems and peripherals from Micro Star Technology Micro Star Inc. of Taiwan, China. A security vulnerability exists in MSI Dragon Center version 2.0.104.0, which stems from a program that allows...

CVE-2021-1075

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of...

Null pointer dereference

In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null termination check in the jailset configuration option "osrelease" may return more bytes with a subsequent jailget system call allowing a...

Microsoft Windows Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Secure Boot is one of the secure boot components. A security feature bypas...

Safari Webkit Proxy Object Type Confusion

This module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the structure of e....

The vulnerability of the IOCTL processor 0x8200E804 of the software device with hardware security keys WibuKey allows a perpetrator to exploit memory access on the kernel level.

The vulnerability of the IOCTL handler 0x8200E804 of the WibuKey.sys software driver involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access kernel memory through a specially crafted IRP request input/output request...