Unspecified Vulnerability in Rivet Killer Control Center (CNVD-2020-19854)

Rivet Killer Control Center is a computer performance optimization and control software. The program mainly supports application checking and setting priorities. A security vulnerability has been identified in Rivet Killer Control Center, Rivet Killer Control Center prior to 2.1.1352.IOCTL 0x1200...

CVE-2019-15662

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges...

kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation

A flaw was found in the Linux kernel's implementation of GVT-g which allowed an attacker with access to a 'passed through' Intel i915 graphics card to possibly access resources allocated to other virtual machines, crash the host, or possibly corrupt memory leading to privilege escalation...

CVE-2019-10567

CVE-2019-10567 affects Qualcomm Adreno GPU kernel driver (KGSL) where a randomized scratch buffer in the global shared mappings is used to store the RPTR for the ringbuffer. The attack leverages the RPTR read from scratch to influence ringbuffer space checks, allowing an attacker-controlled RPTR ...

Android - ashmem Readonly Bypasses via remap_file_pages() and ASHMEM_UNPIN

This bug report describes two ways in which an attacker can modify the contents of a read-only ashmem fd. I'm not sure at this point what the most interesting user of ashmem is in the current Android release, but there are various users, including Chrome and a bunch of utility classes. In AOSP...

CVE-2018-10902

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc double free in sndrawmidiinputparams and sndrawmidioutputstatus which are part of sndrawmidiioctl handler in rawmidi.c file. A malicious local attacker could possibly use this f...

The vulnerability in the Marvell WiFi kernel driver from the `marvell/mwifiex/tdls.c` file in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Marvell WiFi kernel driver from the marvell/mwifiex/tdls.c file in the Linux operating system involves writing beyond the memory buffer boundaries. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause...

CVE-2019-14604

Null pointer dereference in the FPGA kernel driver for IntelR QuartusR Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable denial of service via local access...

Input validation

Improper conditions check in the Linux kernel driver for the IntelR FPGA SDK for OpenCLTM Pro Edition before version 19.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2019-11165

CVE-2019-11165 affects the Intel FPGA SDK for OpenCL Pro Edition (Linux kernel driver) prior to 19.4. The issue is an improper conditions check in the kernel driver that could allow an authenticated user to trigger denial of service via local access. Public reports indicate vulnerable versions ar...

Intel FPGA SDK Code Issue Vulnerability

Intel FPGA SDK for OpenCL Pro is a software development kit for building OpenCL applications from Intel Corporation.Linux kernel driver is one of the drivers for the Linux platform. A code issue vulnerability exists in the Intel FPGA SDK. An attacker could exploit this vulnerability to cause a...

The vulnerabilities of the kernel driver and microprogramming software of Intel Ethernet Series 700 controllers allow a hacker to cause a service failure.

The vulnerability of the kernel driver and microprogramming software for Intel Ethernet Series 700 controllers is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2019-5579 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Intel FPGA SDK for OpenCL Pro Edition versions prior to 19.4 Description: The issue is related to an improper conditions check in the Linux kernel driver, which may allow an authenticated user to potentially enable denial of service via local...

CVE-2019-5688

NVIDIA NVFlash, NVUFlash Tool prior to v5.588.0 and GPUModeSwitch Tool prior to 2019-11, NVIDIA kernel mode driver nvflash.sys, nvflsh32.sys, and nvflsh64.sys contains a vulnerability in which authenticated users with administrative privileges can gain access to device memory and registers of oth...

UBUNTU-CVE-2019-19045

A memory leak in the mlx5fpgaconncreatecq function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service memory consumption by triggering mlx5vector2eqn failures, aka CID-c8c2a057fdc7...

CVE-2019-11112

Memory corruption in Kernel Mode Driver in IntelR Graphics Driver before 26.20.100.6813 DCH or 26.20.100.6812 may allow an authenticated user to potentially enable escalation of privilege via local access...

The vulnerability of the Linux operating system’s vfio kernel driver, which allows a hacker to cause a service failure

The vulnerability of the vfio driver in the Linux operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability in the driver drivers/scsi/qedi/qedi_dbg.c of the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability in the driver drivers/scsi/qedi/qedidbg.c of the Linux operating system relates to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2019-1293

An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to properly handle objects in memory, aka 'Windows SMB Client Driver Information Disclosure Vulnerability'...

UBUNTU-CVE-2019-16229

drivers/gpu/drm/amd/amdkfd/kfdinterrupt.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being serious enough to be deserving a CVE id...