CVE-2024-33219

An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33224

The Realtek Semiconductor Corp Realtek lO Driver version v1.008.0823.2017 is affected by a vulnerability in the rtkio64.sys component. An attacker can exploit this issue by sending crafted IOCTL requests to escalate privileges and execute arbitrary code . Specific exploit details are not provided...

CVE-2024-33224

An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33224

An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33223

The IOMap64.sys component in ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 is vulnerable to improper privilege management . An attacker can escalate privileges and execute arbitrary code by sending crafted IOCTL requests . To mitigate this risk, it is recommended to disable the IOMap64.sys compo...

CVE-2024-33223

An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33222

The ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 is vulnerable to a privilege escalation and arbitrary code execution flaw. The root cause is a security flaw in the ATSZIO64.sys component, which allows an attacker to execute these actions by sending crafted IOCTL requests . As a mitigation, i...

CVE-2024-33221

The ASUSTeK Computer Inc ASUS BIOS Flash Driver version v3.2.12.0 is vulnerable due to a flaw in the AsusBSItf.sys component. This security issue involves an exposed IOCTL with insufficient access control , which allows an attacker to send crafted IOCTL requests to escalate privileges and execute...

CVE-2024-33220

A security vulnerability exists in the AslO3_64.sys component of ASUSTeK Computer Inc AISuite3 v3.03.36 . The root cause is an exposed IOCTL with insufficient access control , which allows an attacker to send crafted IOCTL requests to escalate privileges and execute arbitrary code . As no patch i...

CVE-2024-33220

An issue in the component AslO364.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33220

An issue in the component AslO364.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33219

A security vulnerability exists in the AsIO64.sys component of the ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 . The root cause is an exposed IOCTL with insufficient access control (CWE-782), which allows an attacker to escalate privileges and execute arbitrary code by sending crafte...

CVE-2024-33218

A security vulnerability exists in the AsUpIO64.sys component of the ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver version 5.30.20.0 . The root cause is an exposed IOCTL with insufficient access control , which allows an attacker to escalate privileges and execute arbitrary code by sendi...

CVE-2024-33218

An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2021-47339

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: explicitly clear ioctl input data As seen from a recent syzbot bug report, mistakes in the compat ioctl implementation can lead to uninitialized kernel stack data getting used as input for driver ioctl handlers...

CVE-2021-47364

In the Linux kernel, the following vulnerability has been resolved: comedi: Fix memory leak in compatinsnlist compatinsnlist handles the 32-bit version of the COMEDIINSNLIST ioctl whenwhen CONFIGCOMPAT is enabled. It allocates memory to temporarily hold an array of struct comediinsn converted fro...

CVE-2021-47383

In the Linux kernel, the following vulnerability has been resolved: tty: Fix out-of-bound vmalloc access in imageblit This issue happens when a userspace program does an ioctl FBIOPUTVSCREENINFO passing the fbvarscreeninfo struct containing only the fields xres, yres, and bitsperpixel with values...

kernel: bluetooth: bt_sock_ioctl race condition leads to use-after-free in bt_sock_recvmsg

A flaw was found in the Bluetooth subsystem of the Linux kernel. A race condition between the btsockrecvmsg and btsockioctl functions could lead to a use-after-free on a socket buffer "skb". This flaw allows a local user to cause a denial of service condition or potential code execution...

kernel: a race out-of-bound read in vt

A race problem was seen in the vtkioctl in drivers/tty/vt/vtioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vcmode is not protected by lock-in vtioctl KDSETMDE. The highest threat from this vulnerability is to data confidentiality...

kernel: use-after-free in read in vt_do_kdgkb_ioctl

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality...