CVE-2024-35786 drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveaugemioctlpushbuf If VMBIND is enabled on the client the legacy submission ioctl can't be used, however if a client tries to do so regardless it will return an error. In this case the...

CVE-2024-35786

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveaugemioctlpushbuf If VMBIND is enabled on the client the legacy submission ioctl can't be used, however if a client tries to do so regardless it will return an error. In this case the...

CVE-2024-35849: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfsioctllogicaltoino Syzbot reported the following information leak for in btrfsioctllogicaltoino: BUG: KMSAN: kernel-infoleak in instrumentcopytouser include/linux/instrumented.h:114 inline BUG:...

PT-2024-9789

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.37 Description: The vulnerability is related to a possible dead-lock in the nr rt ioctl function. It occurs when the nr node list lock is acquired before the nr node lock, leading to a circular locking...

CVE-2023-6321 Owlet Camera OS command injection

A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability...

PT-2024-6860

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The vulnerability is related to a signed integer overflow in the cdrom ioctl timed media change function of the Linux kernel. This issue can be exploited to impact the confidentiality, integrit...

CVE-2023-35841

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0...

CVE-2023-35841

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0...

CVE-2023-35841

CVE-2023-35841 describes an IOCTL access-control weakness in the Phoenix WinFlash Driver on Windows, enabling privilege escalation and potential modification of system firmware. The issue affects WinFlash Driver versions before 4.5.0.0, via an exposed IOCTL that allows reading/writing to hardware...

CVE-2023-35841 WinFlash Driver Permissions Issue

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0...

PT-2024-41610

Уязвимость функции pkey unlocked ioctl модуля drivers/s390/crypto/pkey api.c - драйвера поддержки криптографии на платформе S390 ядра операционной системы Linux связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой...

CVE-2023-35841: Incorrect Permission Assignment for Critical Resource

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0...

RHEL 6 : polkit (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - polkit: Improper handling of user with uid INTMAX leading to authentication bypass CVE-2018-19788 - pkexe...

CVE-2024-23354

Memory corruption when the IOCTL call is interrupted by a signal...

CVE-2024-23354

CVE-2024-23354 is a memory-corruption issue in Qualcomm chipsets triggered when an IOCTL is interrupted by a signal. Documented in Qualcomm security bulletins and reflected across sources (NVD, RH, CNNVD, OSV). The records do not specify affected models/versions or a confirmed patch; exploitation...

CVE-2024-23354 Use After Free in Graphics Linux

Memory corruption when the IOCTL call is interrupted by a signal...

CVE-2024-23354 Use After Free in Graphics Linux

Memory corruption when the IOCTL call is interrupted by a signal...

CVE-2024-23354: Use After Free

Memory corruption when the IOCTL call is interrupted by a signal...

PT-2024-26181

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue arises from the validation of node ids in the map benchmark ioctl function, where node possible may be provided with an invalid argument outside of the 0,MAX NUMNODES-1 range. This...

CVE-2024-26991

The Linux kernel is vulnerable to a vmalloc out-of-bounds read within the KVM x86/mmu component. The issue occurs because the KVM_SET_MEMORY_ATTRIBUTES ioctl operation utilizes an optimization in the hugepage_has_attrs() helper function. While level-1 huge pages are checked first to determine if ...