kernel: Use-after-free in snd_seq_ioctl_create_port()

A use-after-free vulnerability was found when issuing an ioctl to a sound device. This could allow a user to exploit a race condition and create memory corruption or possibly privilege escalation...

kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation

A bug in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel has been found. A memory protection mechanism ensuring that user-provided buffers always point to a userspace memory were disabled, allowing destination address to be in a kernel space...

kernel: drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()

An out-of-bounds write vulnerability was found in the Linux kernel's vmwsurfacedefineioctl function, in the 'drivers/gpu/drm/vmwgfx/vmwgfxsurface.c' file. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely...

kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation

A bug in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel has been found. A memory protection mechanism ensuring that user-provided buffers always point to a userspace memory were disabled, allowing destination address to be in a kernel space...

kernel: Use-after-free in snd_seq_ioctl_create_port()

A use-after-free vulnerability was found when issuing an ioctl to a sound device. This could allow a user to exploit a race condition and create memory corruption or possibly privilege escalation...

PT-2018-17428

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security Consumer version 2018 Description A buffer overflow privilege escalation issue exists due to a flaw in the processing of IOCTL 0x22205C by the tmnciesc.sys driver. This could allow a local attacker to escalate...

PT-2018-17431

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security Consumer version 2018 Description The issue is related to an Out-of-Bounds write privilege escalation due to a flaw in the processing of IOCTL 0x222814 by the tmnciesc.sys driver. This could allow a local attacker ...

PT-2019-4502

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.14 through 4.14.165 Linux kernel versions 4.19 through 4.19.96 Linux kernel versions 5.x before 5.2 Description The issue is related to a use-after-free in the i915 ppgtt close function in drivers/gpu/drm/i915/i915 gem...

PT-2018-17430

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security Consumer version 2018 Description The issue is related to an Out-of-Bounds Read Information Disclosure, which could allow a local attacker to disclose sensitive information due to a flaw in the processing of IOCTL...

PT-2018-17429

Name of the Vulnerable Software and Affected Versions Trend Micro Maximum Security Consumer version 2018 Description A buffer overflow privilege escalation issue exists due to a flaw in the processing of IOCTL 0x222060 by the tmnciesc.sys driver. This could allow a local attacker to escalate...

Trend Micro Maximum Security tmnciesc Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Trend Micro Maximum Security tmnciesc Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Trend Micro Maximum Security tmnciesc Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers disclose sensitive information on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...

Trend Micro Maximum Security tmnciesc Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Ubuntu: Security Advisory (USN-3620-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3620-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3620-1 advisory. It was discovered that the netlink 802.11 configuration interface in the Linux kernel did not properly validate some attributes passed from userspace. A...

USN-3620-1 linux vulnerabilities

It was discovered that the netlink 802.11 configuration interface in the Linux kernel did not properly validate some attributes passed from userspace. A local attacker with the CAPNETADMIN privilege could use this to cause a denial of service system crash or possibly execute arbitrary code...

CVE-2017-18257

The getdatablock function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service integer overflow and loop via crafted use of the open and fallocate system calls with an FSIOCFIEMAP ioctl...

CVE-2017-18257: Integer Overflow or Wraparound

The getdatablock function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service integer overflow and loop via crafted use of the open and fallocate system calls with an FSIOCFIEMAP ioctl...

Null pointer dereference

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur...