copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes and crash because of a missing param_kernel->data_size check. This is related to ctl_ioctl.

...

Code injection

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver...

CVE-2024-0788 SUPERAntiSpyware Pro X v10.0.1260 - Kernel-level API parameters manipulation

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver...

Design/Logic Flaw

Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver...

CVE-2024-23441 Vba32 Antivirus v3.36.0 - Denial of Service (DoS)

Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver...

CVE-2024-23441

Vulnerability CVE-2024-23441 affects Vba32 Antivirus v3.36.0 via the Vba32m64.sys driver. The DoS can be triggered by IOCTL code 0x2220A7, leading to availability impact. No exploit details are provided in the sources. A practical workaround documented in PT-2024-19871 is to disable the Vba32m64....

SUPERAntiSpyware Pro X Security Vulnerability

SUPERAntispyware is a security program from SUPERAntiSpyware. A security vulnerability exists in SUPERAntispyware Pro X version v10.0.1260, which originates from a programmatic denial of service by triggering the 0x9C402140 IOCTL code in the saskutil64.sys driver...

PT-2024-15820 · Unknown · Saskutil64.Sys +1

Name of the Vulnerable Software and Affected Versions: SUPERAntiSpyware Pro X version 10.0.1260 Description: The issue concerns kernel-level API parameters manipulation and Denial of Service vulnerabilities. This can be triggered by manipulating the 0x9C402140 IOCTL code of the saskutil64.sys...

kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c

An integer overflow was found in the Linux kernel's vmwgfx driver. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, and able to issue an ioctl on the resulting file descriptor to crash the system, causing a denial of service...

SUSE CVE-2024-23851

copyparams in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INTMAX bytes, and crash, because of a missing paramkernel-datasize check. This is related to ctlioctl...

AZL-34880 CVE-2024-23851 affecting package kernel for versions less than 6.6.35.1-4

copyparams in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INTMAX bytes, and crash, because of a missing paramkernel-datasize check. This is related to ctlioctl...

AZL-33965 CVE-2024-23851 affecting package kernel for versions less than 5.15.153.1-1

copyparams in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INTMAX bytes, and crash, because of a missing paramkernel-datasize check. This is related to ctlioctl...

DEBIAN-CVE-2024-23851

copyparams in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INTMAX bytes, and crash, because of a missing paramkernel-datasize check. This is related to ctlioctl...

CVE-2024-0430

IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver...

PT-2024-15553 · Iobit · Imfhpregfilter.Sys +1

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 11.0.0.1274 Description: The issue is related to a Denial of Service vulnerability that can be triggered by exploiting the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver. Recommendations: For IObit Malwar...

An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free because of an atalk_recvmsg race condition.

...

An issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a use-after-free because of a rose_accept race condition.

...

OESA-2024-1067 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the Linux kernel before 6.6.8. roseioctl in net/rose/afrose.c has a use-after-free because of a roseaccept race condition.CVE-2023-51782...

CVE-2023-51782

An issue was discovered in the Linux kernel before 6.6.8. roseioctl in net/rose/afrose.c has a use-after-free because of a roseaccept race condition...

AZL-33346 CVE-2023-51781 affecting package kernel for versions less than 5.15.148.1-1

An issue was discovered in the Linux kernel before 6.6.8. atalkioctl in net/appletalk/ddp.c has a use-after-free because of an atalkrecvmsg race condition...