kernel: memory leak in drivers/hid/hid-elo.c

A memory leak flaw was found in eloprobe in drivers/hid/hid-elo.c in the Human Interface Devices HID in the Linux kernel. This issue allows an attacker to cause a denial of service when hidparse in eloprobe fails...

The vulnerability of the ` binder_enqueue_thread_work_ilocked()` function in the `drivers/android/binder.c` module of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the binderenqueuethreadworkilocked function in the drivers/android/binder.c module of the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the i2c_put_adapter() function in the Linux operating system’s I2C driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the i2cPutadapter function in the drivers/i2c/i2c-core-base.c file of the Linux I2C driver core relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

CVE-2021-47073

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-smbios-wmi: Fix oops on rmmod dellsmbios initdellsmbioswmi only registers the dellsmbioswmidriver on systems where the Dell WMI interface is supported. While exitdellsmbioswmi unregisters it unconditionally, th...

The vulnerability of the kv_parse_power_table function in the PM Driver component of the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the kvparsepowertable function in the PM Driver component of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Intel QAT Drivers Security Vulnerability

Intel QAT Drivers is a driver from Intel Corporation USA. A security vulnerability exists in Intel QAT Drivers versions prior to QAT1.7-W-1.11.0, which stems from an out-of-bounds read issue that could cause an authenticated user to enable denial of service via local access...

PT-2024-19868 · Unknown · Vba32M64.Sys +1

Name of the Vulnerable Software and Affected Versions: Vba32 Antivirus version 3.36.0 Description: The issue is related to an Arbitrary Memory Read vulnerability. It can be triggered by using specific IOCTL codes of the Vba32m64.sys driver, including 0x22201B, 0x22201F, 0x222023, 0x222027,...

The vulnerability of the exynos_drm_crtc_atomic_disable() function in the drivers/gpu/drm/exynos/exynos_drm_crtc.c driver of the Samsung SoC Exynos Linux kernel, which allows a hacker to trigger a service failure.

The vulnerability of the exynosdrmcrtcatomicdisable function in the drivers/gpu/drm/exynos/exynosdrmcrtc.c driver of the Samsung SoC Exynos Linux kernel is related to the assignment of a null pointer due to concurrent access to resources race condition. Exploiting this vulnerability can allow an...

UBUNTU-CVE-2023-6535

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service...

The vulnerability of the Intel HID Event Filter driver in Intel NUC laptops’ microprogramming software allows a hacker to gain increased privileges.

The vulnerability of the Intel HID Event Filter driver in Intel NUC laptops is related to inherited permission errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2024-0788

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver...

kernel: nfp: use-after-free in area_cache_get()

A vulnerability was found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in the Netronome Flow Processor NFP driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue...

kernel: use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system...

PT-2024-1473 · Panda +1 · Panda Dome +2

Name of the Vulnerable Software and Affected Versions: Watchguard Endpoint Protection, Detection and Response EPDR affected versions not specified Panda Adaptive Defense 360 Panda AD360 affected versions not specified Panda Dome affected versions not specified Description: The issue is related to...

PT-2024-13598 · Unknown · Vsp Driver

Name of the Vulnerable Software and Affected Versions: vsp driver affected versions not specified Description: The issue is related to a logic error in the vsp driver, which can cause a use after free condition. This could lead to a local denial of service and requires System execution privileges...

PT-2024-1991 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an out-of-bounds access in the of pwm single xlate function of the Linux kernel's PWM Pulse Width Modulation driver. This can potentially allow an attacker to...

CVE-2024-21309 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

CVE-2023-52271

The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any Protected Process Light process via an IOCTL which will be named at a later time...

The vulnerability of the Bluetooth driver for Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of Bluetooth driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-22942

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer...