CVE-2024-26656 drm/amdgpu: fix use-after-free bug

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free bug The bug can be triggered by sending a single amdgpugemuserptrioctl to the AMDGPU DRM driver on any ASICs with an invalid address and size. The bug was reported by Joonkyo Jung . For example the...

Microsoft Windows 10.0.17763.5458 Privilege Escalation

Exploit Title : EXPLOIT Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability CVE-2024-21338 This module requires Metasploit: https://metasploit.com/download Author : E1.Coders Contact : E1.Coders at Mail dot RU Security Risk : High require 'msf/core' class...

Important: kernel

Issue Overview: dmtablecreate in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to in alloctargets allocate more than INTMAX bytes, and crash, because of a missing check for struct dmioctl.targetcount. CVE-2023-52429 In the Linux kernel, the following vulnerability has been...

PT-2024-27207

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an overflow in the blk ioctl discard function when the start + len parameter exceeds the maximum allowed value. This can cause a hung task if a discard ioctl is...

SUSE-SU-2024:1025-1 Security update for the Linux Kernel (Live Patch 47 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122173 fixes one issue. The following security issue was fixed: - CVE-2023-51779: Fixed a use-after-free because of a btsockioctl race condition in btsockrecvmsg bsc1218610...

CVE-2024-26644 btrfs: don't abort filesystem when attempting to snapshot deleted subvolume

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume If the source file descriptor to the snapshot ioctl refers to a deleted subvolume, we get the following abort: BTRFS: Transaction aborted error -2 WARNIN...

CVE-2024-29216

Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. By sending a specific IOCTL request, a user without the administrator privilege may perform I/O to arbitrary hardware port or physical address, resulting in erasing or altering the firmware...

CVE-2024-29216

The CVE-2024-29216 issue affects the Sangoma cg6kwin2k.sys driver (cg6kwin2k.sys) prior to version 2.1.7.0. A user without administrator privileges can send a crafted IOCTL, enabling I/O to arbitrary hardware ports or physical addresses and potentially erasing or altering firmware. Affected compo...

CVE-2024-29216

Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. By sending a specific IOCTL request, a user without the administrator privilege may perform I/O to arbitrary hardware port or physical address, resulting in erasing or altering the firmware...

Sangoma Technologies CG/MG family driver cg6kwin2k.sys vulnerable to insufficient access control on its IOCTL

Overview CG/MG family driver cg6kwin2k.sys provided by Sangoma Technologies is vulnerable to insufficient access control on its IOCTL CWE-782. Takahiro Haruyama of Broadcom Carbon Black reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a specifi...

PT-2024-3460

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.28 Description A use-after-free bug has been identified in the Linux kernel, specifically in the AMDGPU DRM driver. This bug can be triggered by sending a single amdgpu gem userptr ioctl to the AMDGPU DRM...

CVE-2024-2204

Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service DoS vulnerability by triggering the 0x80002004 and 0x80002010 IOCTL codes of the zam64.sys and zamguard64.sys drivers...

CVE-2024-2180

Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-2204 Zemana AntiLogger v2.74.204.664 - Denial of Service (DoS)

Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service DoS vulnerability by triggering the 0x80002004 and 0x80002010 IOCTL codes of the zam64.sys and zamguard64.sys drivers...

CVE-2024-2180 Zemana AntiLogger v2.74.204.664 - Kernel Memory Leak

Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-2180 Zemana AntiLogger v2.74.204.664 - Kernel Memory Leak

Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers...

Zemana AntiLogger Code Issue Vulnerability

Zemana AntiLogger is an application from Zemana Inc. protects your PC from keyloggers, malware, ransomware, adware and more. A code issue vulnerability exists in Zemana AntiLogger version v2.74.204.664, which stems from a code issue that allows attackers to cause a denial of service DOS by...

CVE-2024-1853

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853 Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853 Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...