CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, c 0x8086200F, or d...

Aquarius L311 Driver Access Control

The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...

pciem

PCIem A Linux kernel framework enabling synthetic userspace PCIe device emulation. | Documentation What is PCIem? PCIem is a framework that creates virtual PCIe devices in the Linux kernel by leveraging a few novel techniques to populate synthetic cards as legitimate PCI devices to the host OS. T...

CVE-2021-27965

CVE-2021-27965 Proof of concept for CVE-2021-27965 Stack-based Buffer Overflow NOTE: I probably will not update this any further there is still a chance I will finish it. I currently have the ability to cleanly overwrite the instruction pointer, but I believe that this is enough to prove I have t...

cve-2016-5345

CVE-2016-5345 Privilage escalation in Qualcomm FM Radio Driver. Exploit tested on ASUS device. Some privileges already required to open the vulnerable device driver. Original CVE discovered by Aravind Machiry donfos of Shellphish Grill Team...

USN-9018-1 linux, linux-aws, linux-gcp, linux-ibm, linux-oem-7.0, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file systems library; - Stream parser; - ARM64 architecture; - PowerPC architecture; - RISC-V architecture;...

PT-2026-144417

Improper Input Validation in the io-char library's DCMD CHR TCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

CVE-2026-99281

A flaw was found in the Linux kernel's TUN/TAP virtual network device driver. Persistent network devices created without an assigned owner or group failed to enforce administrative privilege checks when users attached to them. A local unprivileged attacker could exploit this vulnerability by...

CVE-2026-69050

Out-of-bounds memory access in a device driver due to improper resource state tracking...

CVE-2026-69050

The SAMSUNG Exynos 1480 is affected by a buffer error vulnerability in its device drivers caused by improper resource state tracking . This flaw can lead to out-of-bounds memory access . The vulnerability is rated as CRITICAL with a CVSS v3.1 score of 9.8 , indicating high impact on confidentiali...

CVE-2026-69050

Out-of-bounds memory access in a device driver due to improper resource state tracking...

CVE-2026-69050

Out-of-bounds memory access in a device driver due to improper resource state tracking...

EUVD-2026-117281

Out-of-bounds memory access in a device driver due to improper resource state tracking...

PT-2026-137372

Out-of-bounds memory access in a device driver due to improper resource state tracking...

USN-8960-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...

CLEANSTART-2024-SO92778 Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out o...

Security vulnerability affects the firefox-esr package. Members of the DEVMODEW struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables...

CVE-2026-99027

A flaw was found in the Linux kernel's team network device driver. When a network packet is dropped during a queue override operation, the driver attempts to reuse the freed packet buffer on subsequent transmit attempts. A local attacker could exploit this use-after-free condition to cause a syst...

CVE-2026-98904 mailbox: imx: Use devm_pm_runtime_enable()

In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Use devmpmruntimeenable sashiko complained about early usage of the device while probe isn't completed. This can be mitigated by delaying the pmruntimeenable into the removal path instead doing it early. This ensure...

HMS Networks PEAK-System Device Driver Setup buffer error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain a buffer error vulnerability. This vulnerability arises because the PCAN processing path for type 0x4030 dereferences an object pointer tha...

HMS Networks PEAK-System Device Driver Setup buffer error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain a buffer error vulnerability. This vulnerability arises because PCAN diagnostic calls fail to verify whether the output buffer provided by...