kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create()

A race condition was found in the QXL driver in the Linux kernel. The qxlmodedumbcreate function dereferences the qobj returned by the qxlgemobjectcreatewithhandle, but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigge...

kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create()

A race condition was found in the QXL driver in the Linux kernel. The qxlmodedumbcreate function dereferences the qobj returned by the qxlgemobjectcreatewithhandle, but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigge...

kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create()

A race condition was found in the QXL driver in the Linux kernel. The qxlmodedumbcreate function dereferences the qobj returned by the qxlgemobjectcreatewithhandle, but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigge...

Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()

...

SUSE CVE-2022-1419

The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...

DEBIAN-CVE-2022-1419

The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...

CVE-2022-1419

The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...

UBUNTU-CVE-2022-1419

The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...

The vulnerability of the vgem_gem_dumb_create function in Linux kernel allows a hacker to execute arbitrary code.

The vulnerability of the vgemgemdumbcreate function in Linux kernel relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux kernel 资源管理错误漏洞

The Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a security vulnerability that allows an attacker to force the reuse of memory areas freed by the Linux kernel via DRMIOCTLMODEDESTROYDUMB to...

CVE-2021-29502 Remote code execution in the WarnSystem module of Laggrons-Dumb-Cogs

WarnSystem is a cog plugin for the Red discord bot. A vulnerability has been found in the code that allows any user to access sensible informations by setting up a specific template which is not properly sanitized. The problem has been patched in version 1.3.18. Users should update and type...

Laggrons-Dumb-Cogs 代码注入漏洞

Laggrons-Dumb-Cogs is a software application. Provides a repository for Laggrons' Dumb Cogs. A code injection vulnerability exists in Laggrons-Dumb-Cogs. The vulnerability stems from the WarnSystem plugin in the program allowing any user to access sensitive information by setting specific templat...

PT-2020-6651 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed in the vgem gem dumb create function of the Linux kernel. This can be exploited to allow an attacker to execute...

DEBIAN-CVE-2018-7999

In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file...

UBUNTU-CVE-2018-7999

In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file...

Microsoft Edge Chakra CFG Bypass By Overwriting JavaScript Bytecode Vulnerability

Chakra suffers from a CFG bypass by overwriting JavaScript bytecode. Chakra: CFG bypass by overwriting JavaScript bytecode Assume an attacker has the ability to overwrite Chakra's bytecode, either through a read/write primitive or through an overflow type vulnerability. Let's take a look at the...

[SECURITY] Fedora 25 Update: picocom-2.2-2.fc25

As its name suggests, picocom is a minimal dumb-terminal emulation program. It is, in principle, very much like minicom, only it's "pico" instead of "mini"! It was designed to serve as a simple, manual, modem configuration, testing, and debugging tool. It has also served quite well as a low-tech...

Dumb Deaths on Halloween - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dumb Deaths on Halloween published at the 'play' market has multiple vulnerabilities...

Catia V5-6R2013 "CATV5_Backbone_Bus" - Stack Buffer Overflow

No description provided by source. ''' Title: Dassault Syst?mes Catia V5-6R2013 CATV5BackboneBus Stack Buffer Overflow Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage: http://www.3ds.com/products-services/catia/portfolio/catia-v5/latest-release/ Tested on...

JetAudio 8.1.1 (.ogg) - Crash PoC

No description provided by source. ''' Exploit Title: JetAudio memory corruption in latest Version 8.1.1 Date: 2014/05/08 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.jetaudio.com Version: Version 8.1.1 and prior to that Test...