CVE-2022-41699: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource in some IntelR QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-40972: Improper Access Control

Improper access control in some IntelR QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41621: Improper Access Control

Improper access control in some IntelR QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable information disclosure via local access...

PT-2023-36683

Уязвимость функции sdma v4 0 hw fini модуля drivers/gpu/drm/amd/amdgpu/sdma v4 0.c драйвера инфраструктуры прямого рендеринга DRI AMD GPU ядра операционной системы Linux связана с неправильным отключением или освобождением ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ ...

PT-2023-14035

Name of the Vulnerable Software and Affected Versions IntelR QAT drivers for Windows versions prior to 1.9.0 Description The issue is related to incorrect permission assignment for a critical resource in some IntelR QAT drivers for Windows, which may allow an authenticated user to potentially...

PT-2023-14018

Name of the Vulnerable Software and Affected Versions IntelR QAT drivers for Windows versions prior to 1.9.0 Description The issue is related to incorrect permission assignment for a critical resource in some IntelR QAT drivers for Windows, which may allow an authenticated user to potentially...

kernel: use-after-free after failed devlink reload in devlink_param_get

A flaw was found in the Netlink device interface implementation in the Linux kernel that improperly handled certain error conditions, leading to a use-after-free issue with some network device drivers. A local attacker with admin access to the network device could use this to cause a denial of...

kernel: vmwgfx: out-of-bounds write in vmw_kms_cursor_snoop

An out-of-bounds memory write vulnerability was found in the Linux kernel's vmwgfx driver in vmwkmscursorsnoop due to a missing check of a memcpy length. This flaw allows a local, unprivileged attacker with access to either the /dev/dri/card0 or /dev/dri/rendererD128 and able to issue an ioctl on...

Intel® QAT Advisory

Summary: Potential security vulnerabilities in some Intel® QuickAssist Technology QAT drivers for Windows may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41699...

PT-2023-36586

Уязвимость функции qedf alloc global queues модуля drivers/scsi/qedf/qedf main.c драйвера устройств SCSI ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Windows ODBC OLE DB Code Execution

The vulnerability of ODBC and OLE DB drivers in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2023-4321

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability was found in the cyttsp4 core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog timer...

CVE-2023-25496

A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a local user to execute code with elevated privileges...

Privilege escalation

A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a local user to execute code with elevated privileges...

CVE-2023-25496

A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a local user to execute code with elevated privileges...

CVE-2023-25496

CVE-2023-25496 concerns Lenovo Driver Manager (Lenovo Drivers Management). The connected records confirm a local privilege escalation vulnerability that could allow a local user to execute code with elevated privileges. The NVD/PSIRT metrics assign CVSSv3.1: AV:L, AC:L, PR:L, UI:N, S:U, C/H, I/H,...

CVE-2023-25496

A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a local user to execute code with elevated privileges...

Lenovo Drivers Management has a security vulnerability

Lenovo Drivers Management is a driver management application for Lenovo products from the Chinese company Lenovo. The program is mainly used for driver installation and upgrading, among other things. A security vulnerability exists in Lenovo Drivers Management. A local attacker can exploit this...

CLSA-2023-1682605601 Fix of 53 CVEs

CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by modtimer Bionic update: upstream stable patchset 2022-03-04 LP: 1963717 // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets CVE-2022-36879 - xfrm: xfrmpolicy: fix a possible double xfrmpolsput in...

CLSA-2023-1682604577 Fix of 53 CVEs

CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by modtimer Bionic update: upstream stable patchset 2022-03-04 LP: 1963717 // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets CVE-2022-36879 - xfrm: xfrmpolicy: fix a possible double xfrmpolsput in...