USN-6284-1 linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service infinite recursion. CVE-2020-36691 Billy Jheng Bing Jhong discovered that the CIFS network...

PT-2023-8000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC SETCONF ioctl on the same tty file descriptor with t...

CVE-2023-20561

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service...

Input validation

Insufficient validation in the IOCTL Input Output Control input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution...

CVE-2023-20561

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address, potentially resulting in a Windows crash, leading to a denial of service. Mitigation Please contact AMD support for updates...

CVE-2023-20561

CVE-2023-20561 describes insufficient validation of the IOCTL input buffer in AMD μProf, enabling an authenticated user to send an arbitrary address that may crash Windows and cause denial of service. The issue is tied to the AMD μProf tool across Windows/Linux/FreeBSD with impact described as Do...

CVE-2023-20561

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service...

CVE-2023-20556

CVE-2023-20556 involves AMD μProf. The issue is insufficient validation of the IOCTL input buffer, which could allow an authenticated user to send an arbitrary buffer and cause a Windows crash, leading to a denial of service (DoS). AMD’s bulletin AMD-SB-7003 confirms affected product is AMD μProf...

CVE-2023-20562

Insufficient validation in the IOCTL Input Output Control input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution...

CVE-2023-20562

CVE-2023-20562 involves AMD μProf (AMD uProf) where there is insufficient validation in the IOCTL input buffer. The impact described across sources is that an authenticated user may load an unsigned driver, potentially enabling arbitrary kernel execution. Connected materials explicitly discuss ex...

AMD μProf Security Vulnerability

AMD μProf is a performance analysis tool from UltraMicroelectronics AMD for applications running on Windows, Linux, and FreeBSD operating systems. A security vulnerability exists in AMD μProf that stems from insufficient validation of the IOCTL input buffer, which could allow an attacker to send ...

PT-2023-17456

Name of the Vulnerable Software and Affected Versions AMD μProf affected versions not specified Description The issue is related to insufficient validation of the IOCTL input buffer in AMD μProf, which may allow an authenticated user to send an arbitrary buffer, potentially resulting in a Windows...

PT-2023-17461

Name of the Vulnerable Software and Affected Versions AMD μProf affected versions not specified Description Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address, potentially resulting in a Windows crash...

AMD μProf Security Vulnerability

AMD μProf is a software analysis tool from Ultra Micro Semiconductor AMD. AMD μProf suffers from a security vulnerability that stems from insufficient validation of the IOCTL input buffer, which allows an attacker to load an unsigned driver, leading to arbitrary kernel execution...

CVE-2023-20562: Undefined Security Weakness

Insufficient validation in the IOCTL Input Output Control input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution...

CVE-2023-20561: Undefined Security Weakness

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service...

CVE-2023-20556: Undefined Security Weakness

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service...

AMD μProf Security Vulnerability

AMD μProf is a software analysis tool from Ultra Micro Semiconductor AMD. A security vulnerability exists in AMD μProf that stems from insufficient validation of the IOCTL input buffer, which allows an attacker to send arbitrary buffers resulting in a Denial of Service DoS...

Command Injection

snapd is vulnerable to Command Injection. The vulnerability exists in the IOCTL system call handler due to lack of parameter checks which allows an attacker to inject and execute arbitrary commands...

Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing opening of ttys could lead to a use-after-free

Linux kernel before 5.6.2 between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free...