CVE-2023-2570: Improper Validation of Array Index

A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an unpredictable index to an IOCTL call in the Foxboro.sys driver...

PT-2023-3076 · Unknown · Foxboro.Sys

Name of the Vulnerable Software and Affected Versions: Foxboro.sys driver affected versions not specified Description: A CWE-787: Out-of-Bounds Write issue exists that could cause local denial-of-service, elevation of privilege, and potentially kernel execution when a malicious actor with local...

PT-2023-4282

Name of the Vulnerable Software and Affected Versions Foxboro DCS Control Core Services affected versions not specified Description The issue is related to an improper validation of array index in the Foxboro.sys driver, which could lead to a local denial-of-service or potentially allow kernel...

CVE-2022-33226

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications...

CVE-2022-33224

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries...

Memory corruption

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries...

CVE-2022-33224

CVE-2022-33224 describes memory corruption in a Qualcomm core component caused by a buffer copy that does not check input size when processing ioctl queries. Connected sources identify the vulnerability as affecting a Qualcomm closed-source component and corroborate the issue as core memory corru...

CVE-2022-33224 Buffer copy without checking the size of input in Core

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries...

CVE-2022-33226: Buffer Copy without Checking Size of Input

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications...

CVE-2022-33224: Buffer Copy without Checking Size of Input

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries...

PT-2023-13246 · Qualcomm · Snapdragon +45

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption in the core due to a buffer copy without checking the size of the input while processing ioctl queries...

DEBIAN-CVE-2023-3111

A use after free vulnerability was found in preparetorelocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfsioctlbalance before calling btrfsioctldefrag...

USN-6125-1 snapd vulnerability

It was discovered that the snap sandbox did not restrict the use of the ioctl system call with a TIOCLINUX request. This could be exploited by a malicious snap to inject commands into the controlling terminal which would then be executed outside of the snap sandbox once the snap had exited. This...

Important: kernel

Issue Overview: A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in tableclear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component. CVE-2023-2269 In the Linux kernel through 6.3.1, a use-after-free in...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-6118-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6118-1 advisory. Zheng Wang discovered that the Intel i915 graphics driver in the Linux kernel did not properly handle certain error conditions, leading to a...

UBUNTU-CVE-2023-1523

Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap sandbox after the snap exits. Graphical terminal emulators like xterm, gnome-terminal and others...

PT-2023-17051

Name of the Vulnerable Software and Affected Versions snap affected versions not specified Description A malicious snap could inject contents into the input of the controlling terminal using the TIOCLINUX ioctl request, allowing it to execute arbitrary commands outside of the snap sandbox after t...

AlmaLinux 8 : kernel (ALSA-2023:2951)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2951 advisory. - Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage. CVE-2021-26341 - When sending...

Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-6085-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6085-1 advisory. It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread....

kernel: possible race condition in drivers/tty/tty_buffers.c

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flushtoldisc function. This flaw allows a local user to crash the...