8737 matches found
PT-2025-8817
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential issue in the Linux kernel has been identified, related to the msm ioctl gem submit function. Specifically, the submit-cmdi.size and submit-cmdi.offset variables, which are u3...
PT-2024-35577
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.65 Description A vulnerability has been resolved in the Linux kernel, specifically in the ocfs2 module. When the 'ioctlOCFS2 IOC GROUP ADD, ...' call fails for a particular inode in 'ocfs2 verify group and...
kernel: drm/amdgpu: use-after-free vulnerability
A failure flaw was found in the Linux kernel’s AMDGPU driver in how a user sends ioctl with an invalid address and size when using the AMD GPU. This flaw allows a local user to crash the system...
kernel: drm/amdgpu: use-after-free vulnerability
A failure flaw was found in the Linux kernel’s AMDGPU driver in how a user sends ioctl with an invalid address and size when using the AMD GPU. This flaw allows a local user to crash the system...
kernel: block: fix overflow in blk_ioctl_discard()
In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blkioctldiscard There is no check for overflow of 'start + len' in blkioctldiscard. Hung task occurs if submit an discard ioctl with the following param: start = 0x80000000000ff000, len = 0x8000000000fff000...
kernel: arp: Prevent overflow in arp_req_get().
A vulnerability was found in the arpreqget function in the Linux kernel when handling the SIOCGARP ioctl input/output control request. This function copies data over into a fixed-length buffer which could result in a buffer overflow and cause memory corruption, undefined behavior, or crashes...
CVE-2024-50217 btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of block device file in btrfsfreeextradevids Mounting btrfs from two images which have the same one fsid and two different devuuids in certain executing order may trigger an UAF for variable...
CVE-2024-50217 btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of block device file in btrfsfreeextradevids Mounting btrfs from two images which have the same one fsid and two different devuuids in certain executing order may trigger an UAF for variable...
f2fs: fix to check atomic_file in f2fs ioctl interfaces
...
SUSE CVE-2024-50151
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2IOCTL request When using encryption, either enforced by the server or when using 'seal' mount option, the client will squash all compound request buffers down for encryption into a single i...
AZL-53733 CVE-2024-50151 affecting package kernel for versions less than 5.15.173.1-1
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2IOCTL request When using encryption, either enforced by the server or when using 'seal' mount option, the client will squash all compound request buffers down for encryption into a single i...
DEBIAN-CVE-2024-50151
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2IOCTL request When using encryption, either enforced by the server or when using 'seal' mount option, the client will squash all compound request buffers down for encryption into a single i...
CVE-2024-38419
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node...
CVE-2024-38407
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...
CVE-2024-38406
Memory corruption while handling IOCTL calls in JPEG Encoder driver...
CVE-2024-33033
Memory corruption while processing IOCTL calls to unmap the buffers...
CVE-2024-23377
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver...
CVE-2024-38419 Use After Free in Automotive GPU
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node...
CVE-2024-38419
CVE-2024-38419 corresponds to memory corruption when invoking IOCTL calls from user-space for the HGSL memory node in Qualcomm chipsets. The issue affects a memory node in HGSL, with a local attack vector and low privileges required; exploitation status is not detailed in the provided documents. ...