138 matches found
Linux TTY Driver Heap Buffer Overflow DoS
The vulnerability of the gsmsend and gsmdatakick functions in the drivers/tty/ngsm.c module of the TTY console driver for the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Serial Port Heap Buffer Overflow DoS
The vulnerability of the lpuartsettermios function in the drivers/tty/serial/fsllpuart.c file of the console TTY driver in the Linux kernel’s serial port layer is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel serial port module Heap Buffer Overflow DoS
The vulnerability of the arcserialprobe function in the drivers/tty/serial/arcuart.c file of the console TTY driver in the Linux kernel’s serial port module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux TTY Goldfish Buffer Overflow Information Disclosure
The vulnerability of the goldfishttyremove function in the drivers/tty/goldfish.c module of the console TTY support driver for the Linux kernel exposes confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
Linux kernel serial port module Heap Buffer Overflow DoS
The vulnerability of the jsmprobeone function in the drivers/tty/serial/jsm/jsmdriver.c file of the console TTY driver in the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...
hdlcdev_init Heap Buffer Overflow DoS
Vulnerability of the hdlcdevinit function in the drivers/tty/synclinkgt.c module – The console TTY driver for the Linux operating system is vulnerable due to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
MiracleLinux 8 : kernel-4.18.0-477.10.1.el8_8 (AXSA:2023-5865:16)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5865:16 advisory. use-after-free caused by l2capreassemblesdu in net/bluetooth/l2capcore.c CVE-2022-3564 net/ulp: use-after-free in listening ULP sockets CVE-2023-046...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001314)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001314 advisory. There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the nttyreceivebufcommon function in drivers/tty/ntty.c. Tenable has extracted the...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003856)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003856 advisory. There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the nttyreceivebufcommon function in drivers/tty/ntty.c. Tenable has extracted the...
ROS-20260112-7330
A vulnerability in the Linux kernel components ttyldisc.c, vt.c, ttydriver.h is related to improper control of resource identifiers. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
PT-2026-8108
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc4-next-20260108-00024-g2202f4d30aa8 Description The Linux kernel contains a flaw related to a race condition in the serial driver. Specifically, the tty-port may not be properly set, leading to a potenti...
SUSE CVE-2023-54198
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
EUVD-2023-60443
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
CVE-2023-54198
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
UBUNTU-CVE-2023-54198
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
CVE-2023-54198
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
CVE-2023-54198 tty: fix out-of-bounds access in tty_driver_lookup_tty()
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds access to the ttydriverlookuptty function...
CVE-2023-53805
CVE-2023-53805 is a Linux kernel issue affecting the TTY GSM driver (tty/n_gsm). The vulnerability arises from a use-after-free in gsm_cleanup_mux() caused by an improperly cleaned gsm->dlci pointer after gsm_dlci_release, leaving a dangling pointer and freeing/accessing gsm->dlci[0] in sub...