The vulnerability of the Aquarius L311 device driver for the Autora operating system, related to access control errors, allows a perpetrator to gain access to protected information and affect the system.

The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...

pciem

PCIem Linux 커널에서 합성 사용자 공간 PCIe 디바이스 에뮬레이션을 가능하게 하는 프레임워크입니다. | 문서 PCIem이란 무엇인가? PCIem은 몇 가지 새로운 기술을 활용하여 합성 카드를 호스트 OS에 합법적인 PCI 디바이스로 노출시킴으로써 Linux 커널에 가상 PCIe 디바이스를 생성하는 프레임워크입니다. 간단히 말하면, PCIem은 호스트의 실제 하드웨어 없이도 PCIe 디바이스 드라이버를 개발하고 테스트하기 위한이에 국한되지 않는 프레임워크입니다. libfvio-user와의 비교 PCIem과...

CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys 1.3.1.0 이전 버전 및 2 IQVW64.sys 1.3.1.0 이전 버전Windows용 인텔 이더넷 진단 드라이버은 로컬 사용자가 조작된 a 0x80862013, b 0x8086200B, c 0x8086200F 또는 d 0x80862007 IOCTL 호출을 통해 서비스 거부를 일으키거나 커널 권한으로 임의 코드를 실행할 수 있도록 합니다. 개요 이 저장소에는 해당 취약점에 대한 분석 자료와 64비트 Windows 7 SP1 및 Windows 10 20H2에서 작동하는 개념 증...

CVE-2026-98239

A flaw was found in the Linux kernel's LAN743x network device driver. This vulnerability allows an attacker capable of transmitting network traffic to an affected system to cause a Denial of Service DoS or memory corruption. The issue occurs because the driver attempts to update checksum...

CVE-2026-80852

A flaw was found in the Linux kernel's TLS device driver. A local attacker could exploit an out-of-bounds write vulnerability in the tlsappendfrag function when handling TLSTXZEROCOPYRO with spliceSPLICEFMORE operations. This flaw allows an attacker to cause memory corruption, leading to a denial...

ROS-20261006-73-0325

The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261006-73-0001

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261006-73-0119

The vulnerability of the spiregistercontroller function in the drivers/spi/spi.c module of the Linux operating system’s SPI device driver lies in the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261006-73-1003

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: uio: uiodmemgenirq: Fixed an issue where the unlock operation was missed in irq configuration. The commit b74351287d4b “uio: fixed a bug in uiodmemgenirqirqcontrol”. corrected the code so that disableirq was called without...

ROS-20261005-73-0122

The vulnerability of the ucanreadbulkcallback function in the drivers/net/can/usb/ucan.c file of the Linux network device driver framework leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261005-73-0130

The vulnerability of the pm8001queuecommand function in the drivers/scsi/pm8001/pm8001sas.c module of the Linux SCSI device driver lies in the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2021-27965

CVE-2021-27965 CVE-2021-27965에 대한 개념 증명 스택 기반 버퍼 오버플로우 참고: 저는 아마 이 내용을 더 이상 업데이트하지 않을 것입니다 완성할 가능성은 여전히 있습니다. 현재 명령 포인터를 깨끗하게 덮어쓸 수 있지만, 적어도 쉽지만 실제 환경의 커널 장치 드라이버를 익스플로잇하는 데 필요한 기술을 입증하기에는 충분하다고 생각합니다. 이 문제를 해결하는 팁에 대해 다른 CVE-2021-27965 익스플로잇을 조사하겠습니다. 왜 완성하지 않았나요? 충돌을 방지하려면 특정 토큰 탈취 셸코드를 사용해야 하는...

cve-2016-5345

CVE-2016-5345 Qualcomm FM 라디오 드라이버의 권한 상승 취약점. 익스플로잇은 ASUS 기기에서 테스트되었습니다. 취약한 장치 드라이버를 열려면 일부 권한이 이미 필요합니다. 원본 CVE는 Shellphish Grill Team의 Aravind Machirydonfos가 발견했습니다...

ROS-20260930-73-0041

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver module is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260930-73-0127

The vulnerabilities of the functions cmpcaccelsensitivityshowv4 and cmpcaccelsensitivitystorev4 in the driver/platform/x86/classmate-laptop.c file of the Linux operating system’s X86 kernel device driver are related to pointer manipulation. Exploiting these vulnerabilities can allow attackers to...

The vulnerability of the rndisbind() function in the drivers/usb/gadget/function/f_rndis.c file of the Linux operating system’s USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rndisbind function in the drivers/usb/gadget/function/frndis.c file of the Linux kernel’s USB device driver is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

The vulnerability of the `ovpn_tcp_socket_detach()` function in the `drivers/net/ovpn/tcp.c` file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ovpntcpsocketdetach function in the drivers/net/ovpn/tcp.c file of the Linux kernel’s network device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the handleFlags() function in the drivers/char/ipmi/ipmi_si_intf.c file of the Linux operating system’s alphabetic device driver module allows a attacker to cause a service failure.

The vulnerability of the handleFlags function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s character device driver lies in the lack of restrictions and regulation regarding resource allocation. Exploiting this vulnerability allows a remote attacker to cause service...

The vulnerability of the ulpi_register() function in the drivers/usb/common/ulpi.c module of the Linux operating system’s USB device driver framework allows a hacker to cause a service failure.

The vulnerability of the ulpiregister function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the re-release of previously released memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...