Null pointer dereference

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module nvidia.ko, where a null pointer dereference may occur, which may lead to denial of service...

CVE-2020-5960

CVE-2020-5960 affects NVIDIA Virtual GPU Manager, specifically the kernel module nvidia.ko, where a null pointer dereference can lead to a denial of service. The connected sources confirm this as a local-risk issue in vGPU software, with the vulnerability impacting the kernel‑mode driver. NVIDIA’...

CVE-2020-5960

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module nvidia.ko, where a null pointer dereference may occur, which may lead to denial of service...

NVIDIA Virtual GPU Manager Denial of Service Vulnerability

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. A security vulnerability exists in the kernel module nvidia.ko in NVIDIA Virtual GPU Manager. An attacker could exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2013-4088

Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System OTRS 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket spl...

CVE-2019-19077

A memory leak flaw was found in the Broadcom NetXtreme HCA driver in the Linux kernel, in the way it handled resource cleanup on the copy to userspace error. This flaw allows a local attacker to trigger this error and crash the system. Mitigation In order to mitigate this issue it is possible to...

CVE-2019-19966

A use-after-free flaw was found in the Linux kernel module, cpia2, in how it handled camera connections. This flaw allows an attacker with physical access to crash the system. Mitigation To mitigate this issue, prevent module cpia2 from being loaded. Please see for how to blacklist a kernel modul...

Reliable Datagram Sockets (RDS) rds_atomic_free_op Privilege Escalation Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reliable Datagram Sockets RDS rdsatomicfreeop NULL pointer dereference Privilege Escalation', 'Description' = %q This module attempts to gain roo...

Kernel: vhost_net: infinite loop while receiving packets leads to DoS

An infinite loop issue was found in the vhostnet kernel module while handling incoming packets in handlerx. The infinite loop could occur if one end sends packets faster than the other end can process them. A guest user, maybe a remote one, could use this flaw to stall the vhostnet kernel thread,...

Reliable Datagram Sockets (RDS) rds_atomic_free_op Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reliable Datagram Sockets RDS rdsatomicfreeop NULL pointer dereference Privilege Escalation', 'Description' = %q This module attempts to gain roo...

CVE-2019-3900

An infinite loop issue was found in the vhostnet kernel module while handling incoming packets in handlerx. The infinite loop could occur if one end sends packets faster than the other end can process them. A guest user, maybe a remote one, could use this flaw to stall the vhostnet kernel thread,...

CVE-2019-19081

A flaw was found in the way the NFP4000/NFP6000 TC Flower offload functionality in the Linux kernel handled memory cleanup on failures. This flaw allows an attacker to cause a denial of service and crash the system. Mitigation To mitigate this issue, prevent module nfp from being loaded. Please s...

CVE-2019-19065

A flaw was found in the Linux kernel. The Intel OPA Gen1 driver mishandles resource cleanup. An attacker able to induce low memory condition on the system could use this flaw to crash the system. The highest threat from this vulnerability is to system availability. Mitigation In order to mitigate...

Reptile Rootkit - reptile_cmd Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reptile Rootkit reptilecmd Privilege Escalation', 'Description' = %q This module uses Reptile rootkit's reptilecmd backdoor executable to gain ro...

CVE-2019-18809

A flaw was found in the Afatech 9005 DVB-T receiver driver in the Linux kernel. An attacker, with physical access to the system, could cause the system to crash following a resource cleanup. The highest threat from this vulnerability is to system availability. Mitigation In order to mitigate this...

Threat Analysis Unit (TAU) Threat Intelligence Notification: Skidmap

Hijacking machine resources and using them to mine for cryptocurrency continues to be an attractive and lucrative target for threat actors. As we’ve continued to see this type of attack used, we’ve also seen more platforms being targeted. Seeing cryptocurrency mining malware targeting Linux and...

CVE-2019-18806

A flaw was found in the way the QLogic QLA3xxx NIC HBA Driver in the Linux kernel handled resource cleanup on a DMA mapping error. This flaw allows an attacker able to trigger the DMA mapping error to crash the system. Mitigation In order to mitigate this issue it is possible to prevent the...

CVE-2019-19055

A flaw was found in the Linux kernel. The Wireless configuration API functionality mishandles resource cleanup in nl80211getftmresponderstats function. An attacker able to trigger the resource cleanup code path could use this flaw to crash the system. The highest threat from this vulnerability is...

CVE-2019-19059

A flaw was found in the way the Intel Wireless driver in the Linux kernel handled resource cleanup during Gen 3 device initialization. This flaw allows an attacker with the ability to restrict access to DMA coherent memory on device initialization, to crash the system. Mitigation In order to...

Intel Graphics Driver Buffer Overflow Vulnerability

Intel Graphics Driver is the Intel graphics card driver. A buffer overflow vulnerability exists in the kernel mode module in Intel Graphics Driver versions prior to 25.20.100.6618 DCH and 21.20.x.5077. An attacker could exploit this vulnerability to obtain information...