8780 matches found
CVE-2021-33655: Out-of-bounds Write
When sending malicous data to kernel by ioctl cmd FBIOPUTVSCREENINFO,kernel will write memory out of bounds...
CVE-2021-33656: Out-of-bounds Write
When setting font with malicous data by ioctl cmd PIOFONT,kernel will write memory out of bounds...
OESA-2022-1748 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: Using the ioctl function to modify the vcfont.height value through PIOFONT can cause the KASAN: vmalloc-out-of-bounds in sysimageblit problem. Requires tty group permissions to access the device file /dev/tty1.CVE-2021-33656...
PT-2025-54120
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the DRM subsystem where the drm copy field function may attempt to copy a NULL pointer. This occurs when a driver has a bug and fails to set...
PT-2025-8578
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where calling the madvise IOCTL twice on a Buffer Object BO causes memory shrinker list corruption, leading to kernel crashes. This occurs...
PT-2022-38069
Уязвимость функции panfrost ioctl madvise модуля drivers/gpu/drm/panfrost/panfrost drv.c драйвера поддержки инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с некорректной зачисткой или освобождением ресурсов. Эксплуатация уязвимости может позволить нарушителю оказать...
GSD-2022-1003452 KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak
KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.45 by commit...
GSD-2022-1003179 KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak
KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...
GSD-2022-1002869 KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak
KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...
PT-2022-31442
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description A potential security issue exists due to the use of an insecure allocation function for certain ioctl interfaces, which could lead to a kernel data leak. The actual impact and attack...
PT-2022-31715
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.45 Description The issue is related to a potential kernel data leak in the KVM: SVM: sev ioctl interfaces. It was introduced in version v5.7 and is fixed in Linux Kernel version v5.15.45. The actual impact...
PT-2022-31132
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description The issue is related to a potential kernel data leak in the KVM: SVM: sev ioctl interfaces. It was introduced in version v5.7 and fixed in Linux Kernel version v5.18.2. The actual impact and...
CVE-2022-2153
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a...
CLSA-2022-1655821334 Fixed 6 CVEs in kernel
net: qrtr: fix another OOB Read in qrtrendpointpost CVE-2021-3743 - vt: keyboard: avoid signed integer overflow in kascii CVE-2020-13974 - pNFS/flexfiles: fix incorrect size check in decodenfsfh CVE-2021-4157 - esp: Fix possible buffer overflow in ESP transformation CVE-2022-27666 - sock: remove...
NDIS Packet Buffer Overflow Due To Allocation/Copy Inconsistencies
Description Reading driver source code is a challenge because despite things appearing to be a vulnerability, there might be a single overlooked comment in MSDN's documentation for an obscure function that ensures that something isn't a vulnerability - in light of this challenge, I'm going to wal...
UBUNTU-CVE-2022-33981
drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating rawcmd in the rawcmdioctl function...
Denial Of Service (DoS)
linux is vulnerable to denial of service. The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...
CVE-2022-20178
In ioctldpmqosupdate and ioctleventcontrolset of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
PT-2022-14407
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an integer overflow in the ioctl dpm qos update and ioctl event control set functions, which could lead to a local escalation of privilege. System execution privileges are needed for...
