CVE-2024-45577

Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information...

DEBIAN-CVE-2025-37806

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in genericfilewriteiter. 1 Before the write operation is completed, the user executes ioctl2 to clear the compress flag of the file, which causes t...

UBUNTU-CVE-2025-37806

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in genericfilewriteiter. 1 Before the write operation is completed, the user executes ioctl2 to clear the compress flag of the file, which causes t...

CVE-2025-37806 fs/ntfs3: Keep write operations atomic

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in genericfilewriteiter. 1 Before the write operation is completed, the user executes ioctl2 to clear the compress flag of the file, which causes t...

CVE-2025-37806

CVE-2025-37806 affects Linux kernel fs/ntfs3 write path. A NULL pointer dereference can occur in __generic_file_write_iter when an ioctl clears the file’s compress flag during a write, causing is_compressed() to return 0 and the code to call the wrong AOP, leading to a null dereference in write_b...

CVE-2025-37806 fs/ntfs3: Keep write operations atomic

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in genericfilewriteiter. 1 Before the write operation is completed, the user executes ioctl2 to clear the compress flag of the file, which causes t...

SUSE CVE-2022-49771

In the Linux kernel, the following vulnerability has been resolved: dm ioctl: fix misbehavior if listversions races with module loading listversions will first estimate the required space using the "dmtargetiteratelistversiongetneeded, &needed" call and then will fill the space using the...

CVE-2025-21470

Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter...

CVE-2025-21469

Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call...

CVE-2025-21462

Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit...

CVE-2024-49830

Memory corruption while processing an IOCTL call to set mixer controls...

CVE-2024-45583

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations...

CVE-2024-45579

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...

CVE-2024-45577

Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information...

CVE-2025-21470 Improper Access Control in Camera Driver

Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter...

CVE-2025-21470 Improper Access Control in Camera Driver

Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter...

CVE-2025-21470

CVE-2025-21470 concerns memory corruption in Qualcomm chipsets during image encoding when the IOCTL configuration is NULL, attributed to a camera driver issue. The vulnerability affects the image-encoding path (memory corruption via NULL config in IOCTL) and is rated high severity (CVSS: Local ac...

CVE-2025-21469 Improper Access Control in Camera Driver

Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call...

CVE-2025-21469 Improper Access Control in Camera Driver

Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call...

CVE-2025-21469

CVE-2025-21469 concerns memory corruption in Qualcomm chipsets’ camera driver during image encoding when the IOCTL input buffer length is 0. The issue is reported as a local, low-privilege condition with high impact to confidentiality, integrity and availability. Public details consistently cite ...