8688 matches found
CVE-2026-23121
In the Linux kernel, the following vulnerability has been resolved: mISDN: annotate data-race around dev-work dev-work can re read locklessly in mISDNread and mISDNpoll. Add READONCE/WRITEONCE annotations. BUG: KCSAN: data-race in mISDNioctl / mISDNread write to 0xffff88812d848280 of 4 bytes by...
Linux kernel ๅฎๅ จๆผๆด
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the drmgemchangehandleioctl function not verifying user-space inputs, potentially triggering a...
PT-2026-22922
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The UFX IOCTL REPORT DAMAGE ioctl does not correctly copy data from user space to kernel space. Instead, it directly references the memory, which can lead to issues if invalid data is...
Exploit for Improper Privilege Management in Patriotmemory Viper_Rgb_Firmware
GenericDrv amigendrv64.sys - Proof of Concept Overview...
VulnCheck KEV: CVE-2025-70795
STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabli...
CVE-2025-27535
Exposed ioctl with insufficient access control in the firmware for some IntelR Ethernet Connection E825-C. before version NVM ver. 3.84 within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable...
Intel Ethernet Connection E825-C ๅฎๅ จๆผๆด
The Intel Ethernet Connection E825-C is a series of network controllers developed by the American company Intel. Versions of Intel Ethernet Connection E825-C prior to NVM ver. 3.84 contain security vulnerabilities. These vulnerabilities stem from insufficient ioctl access control, which may lead ...
CVE-2025-27535: Exposed IOCTL with Insufficient Access Control
Exposed ioctl with insufficient access control in the firmware for some IntelR Ethernet Connection E825-C. before version NVM ver. 3.84 within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable...
PT-2026-7292
Name of the Vulnerable Software and Affected Versions Intel Ethernet Connection E825-C firmware versions prior to 3.84 Description An issue exists due to insufficient access control in the firmware of certain Intel Ethernet Connection E825-C devices. A system software adversary with privileged us...
๐ Microsoft Windows 11 Pro 23H2 Kernel IOCTL Access Control
This Metasploit module exploits an insufficient access control vulnerability in the Windows Kernel through exposed IOCTL handlers. The vulnerability allows non-privileged users to access kernel-level functionality leading to privilege escalation...
VulnCheck KEV: CVE-2010-3437
Integer signedness error in the pktfinddevfromminor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service invalid pointer dereference and system crash via a crafted index value i...
The vulnerability of the lookup_ioctl() function in the drivers/md/dm-ioctl.c module of the support for multiple devices (RAID and LVM) in the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the lookupioctl function in the drivers/md/dm-ioctl.c module of the Linux support driver for multiple devices such as RAID and LVM is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the old_deviceless() function in the net/bridge/br_ioctl.c module, a implementation of networking functions in the Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the olddeviceless function in the net/bridge/brioctl.c module, which implements networking functions in the Linux kernel, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-0106
In vpummap of vpuioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0106
In vpummap of vpuioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0106
In vpummap of vpuioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0106
In vpummap of vpuioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Google Android ๅฎๅ จๆผๆด
Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android, which stem from a lack of boundary checks in the vpummap function of vpuioctl. This vulnerability may lead to arbitrary memory mapping, potentially...
Exploit for CVE-2026-0828
๐ 0xKern3lCrush-M4te-CVE-2026-0828 Windows BYOVD Research &...
The vulnerability of the btrfs_search_path_in_tree_user() function in the fs/btrfs/ioctl.c file of the btrfs file system in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the btrfssearchpathintreeuser function in the fs/btrfs/ioctl.c file of the btrfs file system in Linux kernels leads to mutual locking issues. Exploiting this vulnerability could allow an attacker to cause a service failure...