Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: explicitly clear ioctl input data. As seen from a recent syzbot bug report, mistakes in the compat ioctl implementation can lead to uninitialized kernel stack data being used as input for driver ioctl handlers...

EUVD-2023-24741

Malicious code in bioql PyPI...

EUVD-2022-28760

Malicious code in bioql PyPI...

CVE-2023-20560: Improper Input Validation

Insufficient validation of the IOCTL Input Output Control input buffer in AMD Ryzen™ Master may allow a privileged attacker to provide a null value potentially resulting in a Windows crash leading to denial of service...

PT-2023-17460

Name of the Vulnerable Software and Affected Versions AMD Ryzen Master affected versions not specified Description The issue is related to insufficient validation of the IOCTL input buffer in AMD Ryzen Master, which may allow a privileged attacker to provide a null value, potentially resulting in...

AMD μProf Security Vulnerability

AMD μProf is a software analysis tool from Ultra Micro Semiconductor AMD. AMD μProf suffers from a security vulnerability that stems from insufficient validation of the IOCTL input buffer, which allows an attacker to load an unsigned driver, leading to arbitrary kernel execution...

CVE-2023-20556: Undefined Security Weakness

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service...

PT-2023-17456

Name of the Vulnerable Software and Affected Versions AMD μProf affected versions not specified Description The issue is related to insufficient validation of the IOCTL input buffer in AMD μProf, which may allow an authenticated user to send an arbitrary buffer, potentially resulting in a Windows...

CVE-2022-23831

Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service...

CVE-2022-23831: Improper Input Validation

Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service...