77 matches found
CVE-2024-1642470
Windows USB Generic Parent Driver 원격 코드 실행 취약점 CVE-2024-1642470 개요 이 저장소는 Windows USB Generic Parent Driver 원격 코드 실행 취약점CVE-2024-1642470에 대한 개념 증명PoC 익스플로잇 코드와 탐지 스크립트를 포함하고 있습니다. 설명 CVE-2024-1642470은 Windows USB Generic Parent Driver에서 발견된 심각한 취약점입니다. 이 취약점은 드라이버의 IOCTL 처리 메커니즘 내 부적절한 입력 검증으로 인해...
CVE-2021-38304-PoC
CVE-2021-38304 概念実証 概要 このリポジトリには、National Instruments の旧バージョンの nipalk.sys ドライバにおける重大なセキュリティ脆弱性の概念実証が含まれています。この脆弱性により、カーネルモードで任意のコード実行とメモリ開示が可能になります。これはあくまでも個人研究専用を目的としています。 説明 nipalk.sys ドライバは、特定の IOCTL...
Exposure of Resource to Wrong Sphere
Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...
EUVD-2026-59659
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read possibility The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions custom...
CVE-2026-72091 accel/amdxdna: reject user command submission without a command BO
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into amdxdnacmdsubmit with drvcmd == NULL. When the handle is AMDXDNAINVALIDBOHANDLE 0...
CVE-2026-68179
In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsmdev on post-lock error paths nsmdevioctl jumps to the common out label even when the initial copyfromuser fails before nsm-lock has been taken. The error path then blindly unlocks a mutex that was never...
CVE-2026-15449 TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption
A time-of-check to time-of-use TOCTOU flaw in the illumos data-link pseudo-driver dld affects handling of the DLDIOCGETMACPROP and DLDIOCSETMACPROP ioctls on /dev/dld. drviocpropcommon in usr/src/uts/common/io/dld/dlddrv.c copies the dldiocmacpropt ioctl header in once to read its prvalsize field...
CVE-2026-25266
Memory corruption while processing IOCTL command when device is in power-save state...
PT-2026-52265
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/ethosu component where the driver does not implement the NPU OP RESIZE command, which is specific to U85. When a user submits this command via the DRM IOCTL...
CVE-2025-59610
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer...
CVE-2025-53966
An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow during handling of an IOCTL message...
CVE-2025-53966
A buffer overflow vulnerability exists in the Samsung Mobile Processor models Exynos 1380, 1480, 2400, and 1580 . The root cause is the incorrect handling of the NL80211 vendor command during the processing of an IOCTL message . An IOCTL message is a system call used to control device drivers, an...
CVE-2025-47387
Memory Corruption when processing IOCTLs for JPEG data without verification...
CVE-2025-40117
In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Fix array underflow in pciendpointtestioctl Commit eefb83790a0d "misc: pciendpointtest: Add doorbell test case" added NOBAR -1 to the pcibarno enum which, in practical terms, changes the enum from an unsign...
CVE-2025-27048 Untrusted Pointer Dereference in Camera
Memory corruption while processing camera platform driver IOCTL calls...
EUVD-2007-2169
Malware in sbrugna...
EUVD-2019-1815
Malware in sbrugna...
EUVD-2016-5307
Malware in sbrugna...