10897 matches found
K03310902: Multiple Linux vulnerabilities CVE-2020-8647,CVE-2020-8648, CVE-2020-8649
Security Advisory Description CVE-2020-8647 There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vcdoresize function in drivers/tty/vt/vt.c. CVE-2020-8648 There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the nttyreceivebufcommon function in...
K56923528: Linux kernel vulnerability CVE-2013-4343
Security Advisory Description Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAPNETADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call. CVE-2013-4343 Impact There is...
CVE-2023-26242
afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow...
PT-2023-36680
Уязвимость функции mpi3mr get all tgt info модуля drivers/scsi/mpi3mr/mpi3mr app.c драйвера устройств SCSI ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
Linux Kernel Input Validation Vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an integer overflow in afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c. The vulnerability is cause...
CVE-2023-26242: Integer Overflow or Wraparound
afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow...
CVE-2023-26242
CVE-2023-26242 concerns an integer overflow in afu_mmio_region_get_by_offset located in drivers/fpga/dfl-afu-region.c of the Linux kernel, reported to be vulnerable through kernel version 6.1.12. The connected Nessus plugin notes Linux distros unpatched for CVE-2023-26242, indicating there is no ...
[SECURITY] Fedora 36 Update: tpm2-tss-3.2.2-1.fc36
tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 syst em APIs. It sits between TPM driver and applications, providing TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers...
CVE-2022-36797
Protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-37340
Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-36797
Protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-37340
Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-27808
Insufficient control flow management in some IntelR Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
Default configuration
Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...
Privilege escalation
Uncontrolled search path in some IntelR QAT drivers for Windows before version 1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-30531
Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-30531
Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-27808
Insufficient control flow management in some IntelR Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-27808
Affected software : Intel® Ethernet Controller Administrative Tools drivers for Windows (pre-1.5.0.2). Root cause : Insufficient control flow management within the affected drivers. Impact : An authenticated user with local access may potentially escalate privileges. Evidence : CVE-2022-27808 des...
CVE-2022-37340
The CVE-2022-37340 issue affects Intel(R) QuickAssist Technology (QAT) drivers for Windows prior to version 1.6. The vulnerability is an uncontrolled search path in the driver, which could allow an authenticated local user to escalate privileges. Public sources (NVD, Red Hat, Intel advisory) alig...