K03310902: Multiple Linux vulnerabilities CVE-2020-8647,CVE-2020-8648, CVE-2020-8649

Security Advisory Description CVE-2020-8647 There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vcdoresize function in drivers/tty/vt/vt.c. CVE-2020-8648 There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the nttyreceivebufcommon function in...

K56923528: Linux kernel vulnerability CVE-2013-4343

Security Advisory Description Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAPNETADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call. CVE-2013-4343 Impact There is...

CVE-2023-26242

afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow...

CVE-2023-26242

CVE-2023-26242 concerns an integer overflow in afu_mmio_region_get_by_offset located in drivers/fpga/dfl-afu-region.c of the Linux kernel, reported to be vulnerable through kernel version 6.1.12. The connected Nessus plugin notes Linux distros unpatched for CVE-2023-26242, indicating there is no ...

Linux kernel 输入验证错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an integer overflow in afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c. The vulnerability is cause...

[SECURITY] Fedora 36 Update: tpm2-tss-3.2.2-1.fc36

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 syst em APIs. It sits between TPM driver and applications, providing TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers...

CVE-2022-37340

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36797

Protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-37340

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36797

Protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-27808

Insufficient control flow management in some IntelR Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Default configuration

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-30531

Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30531

Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-27808

Insufficient control flow management in some IntelR Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-27808

Affected software : Intel® Ethernet Controller Administrative Tools drivers for Windows (pre-1.5.0.2). Root cause : Insufficient control flow management within the affected drivers. Impact : An authenticated user with local access may potentially escalate privileges. Evidence : CVE-2022-27808 des...

CVE-2022-37340

The CVE-2022-37340 issue affects Intel(R) QuickAssist Technology (QAT) drivers for Windows prior to version 1.6. The vulnerability is an uncontrolled search path in the driver, which could allow an authenticated local user to escalate privileges. Public sources (NVD, Red Hat, Intel advisory) alig...

CVE-2022-37340

Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36397

CVE-2022-36397 affects Intel® QuickAssist Technology (QAT) drivers for Linux prior to version 4.17. The issue is caused by incorrect default permissions in the software installer, which may allow an authenticated local user to escalate privileges. Intel’s advisory and Red Hat/NVD/Nessus reference...