CVE-2026-80112

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local users to perform privileged hardware operations by opening...

CVE-2026-15449

CVE-2026-15449 describes a TOCTOU vulnerability in the illumos data-link pseudo-driver (dld) regarding handling of DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctls on /dev/dld. In drv_ioc_prop_common(), the header is read once to obtain pr_valsize, a kernel heap buffer is allocated, and then the fu...

CVE-2025-47386

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...

PT-2025-51670

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to handling device attachment status within compatible IOCTL handlers. Specifically, sanity checks for a device's attached status are missing in...

EUVD-2025-9995

Malicious code in bioql PyPI...

DEBIAN-CVE-2025-37848

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix PM related deadlocks in MS IOCTLs Prevent runtime resume/suspend while MS IOCTLs are in progress. Failed suspend will call ivpumscleanup that would try to acquire filepriv-mslock, which is already held by the IOCT...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from insufficient power management synchronization in MS IOCTL operations, which could lead to a deadlock...

CVE-2025-21437

Memory corruption while processing memory map or unmap IOCTL operations simultaneously...

CVE-2025-21437

Memory corruption while processing memory map or unmap IOCTL operations simultaneously...

CVE-2025-21437 Use After Free in Automotive Linux OS

Memory corruption while processing memory map or unmap IOCTL operations simultaneously...

CVE-2025-21437

The connected sources describe CVE-2025-21437 as a race condition in Qualcomm chipset memory management: when processing memory map and unmap IOCTLs concurrently, a use-after-free causes memory corruption. Root cause is a missing synchronization between hfastrpc mem map and mem unmap operations, ...

CVE-2025-21437 Use After Free in Automotive Linux OS

Memory corruption while processing memory map or unmap IOCTL operations simultaneously...

PT-2025-15210 · Qualcomm · Snapdragon +25

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when processing memory map or unmap IOCTL operations simultaneously. This happens due to a race condition where one thread calls hfastrpc mem...

CVE-2022-49291 ALSA: pcm: Fix races among concurrent hw_params and hw_free calls

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent hwparams and hwfree calls Currently we have neither proper check nor protection against the concurrent calls of PCM hwparams and hwfree ioctls, which may result in a UAF. Since the existing P...

kernel: KVM: NULL pointer dereference in kvm_irq_delivery_to_apic_fast()

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a...