CVE-2018-7755

CVE-2018-7755 affects the Linux kernel floppy driver: the fd_locked_ioctl path in drivers/block/floppy.c copies a kernel pointer to user memory in response to FDGETPRM, enabling a local attacker with floppy access to discover kernel code/data locations and bypass KASLR. The issue is in kernel ver...

CVE-2018-7755

An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discove...

CVE-2018-7755

An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discove...

Linux Kernel 'drivers/block/floppy.c' Security Restriction Bypass Vulnerability

The Linux Kernel is the kernel of the Linux operating system. Linux kernel 4.15.4 and earlier versions have a security vulnerability in their implementation that, when successfully exploited, could allow an attacker to gain access to sensitive information...

UBUNTU-CVE-2018-7755

An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discove...

Code injection

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

CVE-2018-7273

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

CVE-2018-7273

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

DEBIAN-CVE-2018-7273

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

CVE-2018-7273

CVE-2018-7273 affects the Linux kernel floppy driver. The show_floppy path in drivers/block/floppy.c prints kernel addresses via printk, enabling local attackers to read addresses from dmesg and locate kernel code/data, potentially bypassing KASLR. The vulnerability is described for Linux kernels...

CVE-2018-7273

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

CVE-2018-7273

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

The vulnerability of the Linux operating system, which allows a malicious individual to gain access to protected information

The rawcmdcopyout function in the file /drivers/block/floppy.c has a bug in its handling of permissions for accessing memory pointers during the execution of the system call FDRAWCMD. This allows malicious actors to gain access to information stored in the dynamic memory of the operating system’s...

The vulnerability of the Linux operating system, which allows a malicious individual to gain access to protected information

The function rawcmdcopyout in the file /drivers/block/floppy.c contains an error in the handling of permissions for accessing memory pointers during the execution of the system call FDRAWCMD. This allows a malicious individual to gain access to information stored in the dynamic memory of the...

The vulnerability of the Linux operating system, which allows a malicious individual to increase their privileges

The function rawcmdcopyin in the file drivers/block/floppy.c incorrectly handles the system call FDRAWCMD, allowing users to increase their privileges...

USN-2608-1: QEMU vulnerabilities

Jason Geffner discovered that QEMU incorrectly handled the virtual floppy driver. This issue is known as VENOM. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation, wh...

RHEL 6 : kernel (RHSA-2014:0900)

Updated kernel packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux 6.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which...

kernel: block: floppy: privilege escalation via FDRAWCMD floppy ioctl command

A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free using the kfree function arbitrary kernel memory. CVE-2014-173...

kernel: block: floppy: privilege escalation via FDRAWCMD floppy ioctl command

A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free using the kfree function arbitrary kernel memory. CVE-2014-173...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux 6.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which...