CVE-2021-38785

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

CVE-2021-38785

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

Null pointer dereference

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

CVE-2021-38785

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

CVE-2021-38785

CVE-2021-38785 describes a NULL pointer dereference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev. The issue can be triggered by the IOCTL_GET_IOMMU_ADDR ioctl, leading to a system crash. The available documents identify the affected component and the crash impact but ...

CVE-2021-38783

CVE-2021-38783 affects the Allwinner R818 SoC Android Q SDK V1.0 camera driver, exposing /dev/cedar_dev to iotcl IOCTL_SET_PROC_INFO and IOCTL_COPY_PROC_INFO. The root cause is an out-of-bounds write in the driver, which can cause a system crash or privilege escalation. Provided documents do not ...

PT-2022-10346

Name of the Vulnerable Software and Affected Versions NVIDIA Linux distributions affected versions not specified Description The issue is related to a use-after-free condition in the nvmap ioctl, which can be exploited by any user with a local account. This can lead to code privilege escalation,...

CVE-2021-34403: Use After Free

NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free condition, leading to code privilege escalation, loss of confidentiality and integrity, or denial of service...

PT-2022-10774

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is related to a NULL pointer deference in the camera driver /dev/cedar dev. This could be exploited using the ioctl cmd IOCTL GET IOMMU ADDR to cause a system crash. Recommendations F...

CVE-2021-38785: NULL Pointer Dereference

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

kernel: Heap buffer overflow in firedtv driver

A heap-based buffer overflow flaw was found in the Linux kernel FireDTV media card driver, where the user calls the CASENDMSG ioctl. This flaw allows a local user of the host machine to crash the system or escalate privileges on the system. The highest threat from this vulnerability is to...

GSD-2022-1000051 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

GSD-2022-1000042 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000026 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit...

PT-2022-28317

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.224 Description The issue concerns the validation of user data in the compat ioctl of the i2c component. It was introduced in version v4.15 and fixed in version v4.19.224. The actual impact and attack...

Red Hat Enterprise Linux Permission Licensing and Access Control Vulnerabilities

Red Hat Enterprise Linux is a Linux operating system for business users from the American company Red Hat, Inc. A security vulnerability exists in Red Hat Enterprise Linux that stems from a data leakage flaw found in the way the XFS IOC ALLOCSP IOCTL in the XFS file system allows for the addition...

PT-2022-28342

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue concerns the validation of user data in compat ioctl for i2c. It was introduced in version v4.15 and fixed in Linux Kernel version v5.15.13. The actual impact and attack plausibilit...

PT-2022-28333

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.90 Description The issue concerns the validation of user data in compat ioctl. It was introduced in version v4.15 and is fixed in Linux Kernel version v5.10.90. The actual impact and attack plausibility hav...

PT-2022-28325

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.170 Description The issue concerns the validation of user data in compat ioctl. It was introduced in version v4.15 and fixed in Linux Kernel version v5.4.170. The actual impact and attack plausibility have n...

PT-2022-2254

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the smb2 ioctl query info function in the Linux kernel's Common Internet File System CIFS, specifically due to an incorrect return from the memdup user function...