SUSE CVE-2023-2007

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-2767)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enabl...

CVE-2022-3577

An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigbenprobe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben...

CVE-2022-3577: Missing Release of Memory after Effective Lifetime

An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigbenprobe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben...

CVE-2022-3077

A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2CSMBUSBLOCKPROCCALL case via the ioctl I2CSMBUS with malicious input data. This flaw could allow a local user to crash the system...

CVE-2022-3077

A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2CSMBUSBLOCKPROCCALL case via the ioctl I2CSMBUS with malicious input data. This flaw could allow a local user to crash the system...

CVE-2022-3077: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2CSMBUSBLOCKPROCCALL case via the ioctl I2CSMBUS with malicious input data. This flaw could allow a local user to crash the system...

Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5602-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5602-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A...

Design/Logic Flaw

An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2CSMBUSBLOCKDATA with the ioctl I2CSMBUS with malicious input data. This flaw allows a local user to crash the system...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds memory access vulnerability found in Intel's iSMT SMBus host controller driver, which can...

CVE-2022-2873: Incorrect Calculation of Buffer Size

An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2CSMBUSBLOCKDATA with the ioctl I2CSMBUS with malicious input data. This flaw allows a local user to crash the system...

FreeBSD security vulnerabilities

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. FreeBSD suffers from a security vulnerability that originates from a boundary error in the mpr, mps, and mpt disk collector drivers. A local attacker could exploit the vulnerability to escalate privileges on the system...

PT-2021-26691

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.293 Description: The issue is related to the ohci-tmio host controller driver in the Linux Kernel. It involves checking the return value after calling the platform get resource function. The actual impact a...

PT-2021-26738

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.162 Description: The issue is related to the ohci-tmio host controller driver in the Linux Kernel. It involves checking the return value after calling the platform get resource function. The actual impact a...

PT-2021-4439 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an integer overflow in the Storage Spaces Controller driver, which can be exploited to elevate privileges. This could allow an attacker to affect the system. No...

Linux kernel Use-After-Free

The vulnerability of the Linux operating system’s driver/usb/host/max3421-hcd.c component is related to the use of memory after it has been freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2021-5680

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient protection of service data in the Storage Spaces Controller driver, which can allow an attacker to gain unauthorized access to protected information. This...

PT-2021-6944

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description The issue is related to an integer overflow in the Storage Spaces Controller driver, which can be exploited to elevate privileges. This could allow an attacker to...

PT-2021-6036 · Microsoft · Windows Storage Spaces Controller +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Spaces Controller affected versions not specified Description: The issue is related to errors in object handling in memory within the Storage Spaces Controller driver in Windows operating systems. This can allow an attacker to...

EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2021-1994)

According to the version of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...